General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 267 Views
  • 0 replies
  • 1 Likes

The WildFire module price

Hello, сolleagues!

I am interesting in the PaloAlto and I am only starting to use it.

 

IPlease say where can I buy subscription to the The WildFire module ?

Can I buy only The WildFire subscription or I must buy smth else?

If anybody know where is a page

...

Resolved! X-forwarded-for not showing results

We use F5 with its VIP interfaces in DMZ and is doing SSL offloading (presents a cert on the webserver's behalf allowing plain text traffic to be inspected).  As in below example, external source(1.1.1.1) acesses 2.2.2.2(PA NATS to 10.10.10.10 of the

...

image.png
raji_toor by L4 Transporter
  • 4233 Views
  • 4 replies
  • 0 Likes

Resolved! Is there a protoype that can read this XML format?

Before I go down the route of writing a prototype (or attempting to), I was wondering if there was a prototype that I could use to read an IP list in this XML format.  I would be interested in pulling out the address and country:

 

<?xml version="1.0...

Running MineMeld from OVA

Good afternoon!  I have a quick question about running MineMeld from the OVA.   We have some pretty strict policy against installing via GitHub and, the best way for me to get MineMeld installed, would be to use the OVA method.  I'm new to running it

...

Create new prototype for Rest API and simple URL

Hi Experts,

 

I have a customer who wants to create new prototype for this customer. 

customer requirement is very simple but, it's very hard to me. 

 

first of one,

customer said spunk is using Rest API, below is feeds from splunk 

curl -k https://s

...

jilim by L1 Bithead
  • 3813 Views
  • 3 replies
  • 0 Likes

Resolved! How do you use the new predefined Dynamic IP lists?

Greetings all,

 

I'm wanting to use the new Palo Alto provided dynamic IP lists to block known malicious or high risk IPs but, when creating a security policy, I can't seem to get it to appear in the list for selection.  I've tried copy/pasting the nam

...

jsalmans by L4 Transporter
  • 6884 Views
  • 11 replies
  • 0 Likes

SSL decryption non standard ports

Hello all,

 

I am wondering if palo can identify and decrypt encrypted traffic on non-standard ports(other than 443)? In other words, does firewall decrypt all encrypted traffic traversing through that matches rule?

Resolved! show user group name not showing user list

Hello,

 

We are not getting the list of individual users in the command: show user group name <name>

 

> show user group name "CN=adminstaff,OU=staff,OU=security,OU=Groups,OU=College,OU=Schools,OU=CEWA,DC=test,DC=edu,DC=au"

 

short name:  test\adminstaff

 

s

...

Farzana by L4 Transporter
  • 7482 Views
  • 1 replies
  • 0 Likes

PAN-2020 site-to-site with Meraki Cloud managed firewall

Hi all,

Has anyone had success establishing a site-to-site tunnel between an PAN firewall and a Cisco Meraki Cloud managed firewall?  I've been messing with it for most of the day and have not found much luck.  I've added a third party peer on the Mer

...

cmateam by L3 Networker
  • 8218 Views
  • 7 replies
  • 0 Likes

Resolved! Configuring OCSP

I am trying to configure OCSP and I am a little confused.

 

I have added an OSCP responder. 

 

It appears the second step is to allow the Firewall to use it by configuring Device-Management->Interfaces.  However, for most of my settings, I am using a Ser

...

Resolved! Minemeld with Proxy

Is there any way to perform the minemeld install from behind a proxy? I am deploying a minemeld node in a datacenter where internet access is only available via squid proxy.

 

Thanks,

Nasir

nbilal by L3 Networker
  • 16306 Views
  • 12 replies
  • 0 Likes
  • 23632 Posts
  • 107 Subscriptions
Top Liked Authors
Labels