This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 2193 Views
  • 0 replies
  • 0 Likes

Resolved! Decryption Profile ----No decryption

i am using default  decryption profile.

 

Under tab  no decryption i see below

 

block sessions with expired certs

 

 

need to understand when does this setting is used when i am doing the ssl decryption or not doing ssl decryption?

 also does it only apply

...

MP18 by • Cyber Elite
  • 3477 Views
  • 4 replies
  • 0 Likes

show counter global | match proxy

Need to verify if below output looks good from ssl decrypt 

 

show counter global | match proxy
ctd_fwd_session_proxy_deny 384306 0 info ctd pktproc Content forward: action init denied for decrypted sessions
ctd_switch_proxy 4 0 info ctd pktproc switch t

...

MP18 by • Cyber Elite
  • 4057 Views
  • 3 replies
  • 0 Likes

Resolved! LDAP over IPsec?

Hello.

 

I'm trying to configure UserID via our domain controllers in AWS.

 

The setup:

We have an HA PA-820 pair on-prem connected to our domain in AWS via a redundant IPsec tunnel.  Traffic is passing between LAN and IPsec zones; on-prem workstations ca

...

Tunnel Migration

Hello,

 

I am going to migarte my production firewall PA5050 into new location, already done the setup of firewall.

 

Can any one please suggest the best possible way to migrate my all IPVPN tunnels in New Palo Alto, is basilcy to move one palo alto to a

...

Resolved! Working temperature

Hello everyone

What are the normal working temperature for palo-alto pa-820, pa-500  and pa-3020 ? 

It seems that it's beyond to the normal specifications ( above 40 °C )

Thanks's you for your answer

Learner by • L1 Bithead
  • 6630 Views
  • 6 replies
  • 0 Likes

Resolved! AutoFocus-Hosted MineMeld: access to API

Hi,

 

we have an autofocus instance with MineMeld application enabled. I'd like to call this Minemeld's API in order to get some metrics for our internal reports about Intel.

 

With self-hosted Minemeld is easy, but, is it possible with  AutoFocus-Ho

...

Major issue PanOS 8.1.3: Network intefaces go down

We have some issues for some users with the globalprotect vpn to connect to our PA-3260 firewall.
To solve this issue technical support told us to upgrade to our PanOS from 8.1.2 to 8.1.3.

We did this morning and everything went fine till 1PM.

From some

...

ZEBIT by • L3 Networker
  • 9857 Views
  • 12 replies
  • 2 Likes

Cisco QSFP adapters

Has anyone used these Cisco QSFP adapters for the QSFP and HA2 ports? Officially not supported but they will probably work as they support the same QSFP standard.

 

The PA5220 HA2 uses an HSCI/QSFP port. We want to use a Cisco BiDi QSFP Transceiver her

...

djon by • L1 Bithead
  • 9629 Views
  • 4 replies
  • 0 Likes

HTTPS and SSH Traffic Is Not Working

Hello,
I’m new to the Palo Alto community. I’m hoping someone would be able to help me with this problem we are having.

We have a Palo Alto PA3060 firewall that has a Layer 3 interface configured with a sub-interface that is also Layer 3 and tagged wit

...

PaloAlto_Network_Drawing.png

URL Filtering

Is anyone using the URL filter in replace of a proxy? I made this attempt but ran across an issue with user I’d mapping not being mapped accurately or fast enough and it was causing issues with users being allowed internet access. I want to only allo...

  • 24253 Posts
  • 119 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks