This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Policy not catching correct traffic

Hi all, first time poster so go easy! We're running into an issue where a rule that is meant to catch ether-ip traffic on port 20033 is slipping through and being caught by a lower rule which allows any application and service. Rules as follows: When running the "show session all filter rule X" command in cli, we can see that sessions are only ...

rules.png
rulebig.png
cli.png

HA1-B down on 3200 series

I've been doing some tinkering with a pair of 3220s and am noticing that in the GUI it's reporting HA1 Backup is down in the HA widget of the dashboard if I use the HA1-B port. HA1-A is up, and if I use the management port for HA1-Backup, it comes up fine. I configured HA1-B the same as HA1-A, only using a different /30 network. I've tried di...

dan731028 by • L3 Networker
  • 12338 Views
  • 6 replies
  • 0 Likes

Resolved! Adding a sub-interface to an exsiting Security Zone

Hi, I have a Palo Alto with existing security zones managed via Panorama. I need to add an existing sub-interface to an existing security zone which has been done on Panorama and committed. However, after logging into the firewall node directly the sub-interface does not show it has been assigned to the security zone. Are templates only used to ...

vvadia by • L1 Bithead
  • 8403 Views
  • 6 replies
  • 0 Likes

move subinterfaces to new aggreagate group

Hey guys,I got a pair of PA-3020s (8.0.7) and 2 ae's with a lof of subinterfaces. Each subinterface does have a gateway, security zone and vlan tag.Out of permonance issues, I want to create a third ae with two new physical interfaces.Then, I want to move some subinterfaces to that new ae.What would be the smartest way to do that? (Without loosi...

MPI-AE by • L4 Transporter
  • 3292 Views
  • 3 replies
  • 0 Likes

Wrong user from access log

Hello! The local user Administrator is logged in on the desktop and he is not allowed to access the internet. But he can access.When checking in Monitor on PA220, I noticed that another user appears in the Source User column and not the Administrator user.Has anyone ever experienced this? Software version 8.0.10 Thank you!

How to view searched words using custom reports

Hello Community! I´m trying to see the searched words made with different search engines. For this I wanna create custom reports and look for terms on the URL log database with the help of different query builders. I´m following the idea of this doc:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm19CAC I´m not able to...

Carracido by • L4 Transporter
  • 3492 Views
  • 3 replies
  • 0 Likes

general question to aggregate group

Hi all!When I create an aggregate group, there is the possibility to enable LACP.But when I don't enable LACP, which ethernet standard is enabled then?Does the firewall utilize bandwith over all links as in LACP?Thank you

MPI-AE by • L4 Transporter
  • 2749 Views
  • 2 replies
  • 0 Likes

Resolved! Testing Sinkhole DNS

Hello, all I am testing Anti-Spyware DNS sinkhole. I set: I make policy with this profile. For most DNS-names in category “Malware” и “Command and Control” (https://threatvault.paloaltonetworks.com/) i see nslookup answer, for example: Addresses: ::1127.0.0.1And it is good. But for two DNS-names: namecha.in, 4cdf1kuvlgl5zpb9.pmr.cc (Malware cate...

Sinkhole.png
aaobuhov by • L2 Linker
  • 3121 Views
  • 2 replies
  • 0 Likes

Pan-OS Upgrade path question

I know this is a frequent question, but I've not seen one particular aspect of it. I need to upgrade from 7.0.1 to 7.1.x (the latest). Am I correct that I would do the following: Download and install 7.0.19 <- this is my main question- can I go directly from 7.0.1 to 7.0.19 or is there an interim version needed? rebootDownload and install 7....

bwade by • L0 Member
  • 2301 Views
  • 1 replies
  • 0 Likes

Resolved! 'proxy decrypt failure' in session detail even though no ssl decryption

CLI shows Session 33880958c2s flow:source: 10.29.32.146 [_DMZ]dst: 65.55.163.76proto: 6sport: 59760 dport: 443state: INIT type: FLOWsrc user: unknowndst user: unknowns2c flow:source: 65.55.163.76 [_EXT]dst: 198.160.191.5proto: 6sport: 443 dport: 32999state: INIT type: FLOWsrc user: unknowndst user: unknownqos node: ae1.3741, qos member N/A Qid ...

MP18 by • Cyber Elite
  • 5925 Views
  • 4 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks