General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

LAB PA-200 fails 7.0.1 upgrade

I have a Lab PA-200 that I have been upgrading to the latest version of PAN OS for testing.I have been uploading the OS file and upgrading for a while.The 7.0 file worked fine. After the alert about 7.0. I attempted to upgrade to 7.0.1.No joy. In Firefox and Chrome the upload dialog just sits there forever.With IE 11 it finally gives the error: ...

markwoll by L1 Bithead
  • 14571 Views
  • 21 replies
  • 0 Likes

Password Spraying Protection

Hi!In my company we are using GlobalProtect VPN's as a medium to access the network. Right now we have a blocking procedure by which if a user fails 5 times the password while trying to login, his account gets blocked for 15 minutes.We are using this -> https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClJ2CAK Recently...

arnauec by L1 Bithead
  • 7546 Views
  • 5 replies
  • 0 Likes

MineMeld on CentOS 7.5 (HOSTED on AWS)

Hi to everyone. I'm new here and I have a issue as follow: Installed MineMeld on centos 7 in my lab environment and everything goes smoothy. Now I'm trying to deploy on AWS server with same OS but I got the erro executing ansible-playbook. TASK [minemeld : minemeld-webui repo] *********************************************************************...

Fumaca14 by L0 Member
  • 2267 Views
  • 1 replies
  • 1 Likes

Resolved! SSL decryption and load on Management plane

Need to confirm if we enable ssl decryption will that put load on MP? https://www.reddit.com/r/paloaltonetworks/comments/8s9gay/ssl_decryption_causing_high_management_plane_cpu/

MP18 by Cyber Elite
  • 4712 Views
  • 3 replies
  • 0 Likes

Upgrade to OS 8.1.3

I am currently on OS 7.1.19 and am planning my upgrade path to the best version of 8 sometime soon. In order to upgrade do I have to install the base 8 version or just download it?

jdprovine by L4 Transporter
  • 11213 Views
  • 30 replies
  • 0 Likes

Never ending globalprotect VPN drops

Supporting VPN for people is a challenge no matter what VPN you are using but people never consider the reliabilty of their own ISP provider as part of that issue. So what is the best way to rule out the users ISP as the problem and not the globalprotect client/VPN access? But to be fair I do not want to rule that out either . This my users comp...

jdprovine by L4 Transporter
  • 14128 Views
  • 26 replies
  • 0 Likes

DNS Signature Lists

Does anyone know any free External Dynamic Lists for DNS signatures to use in conjunction with the Palo DNS Signatures? We would like some extra protection for our anti-spyware protection.

Monitor of IPSec tunnel

What is the best way to monitor an IPSec tunnel on the PA, I don't see anything in the traffic logs at all just the systeme logs

jdprovine by L4 Transporter
  • 3751 Views
  • 7 replies
  • 0 Likes

Resolved! Decoder function

Need to confirm in PA decoder does content id app id and antivirus detection.? Also once session is offloaded then function of decoder is finished?

MP18 by Cyber Elite
  • 3568 Views
  • 2 replies
  • 0 Likes

LDAP is not sending framedIPAddress for GlobalProtect Static Assignment

We are trying to configure static IP assignment in globalprotect and have selected the "Retrieve framed ip address" option on the client gateway. I've also selected "Static IP Assignment" under the Dial-In tab in AD for the users and given them IPs that fall in the pool for static assignment, however my clients are not receiving their static IP...

Commits and Firmware Upgrades Failing

I've got a couple of support tickets open on my issues just seeing if anyone has any suggestions/ideas as Support I wait for support to help me out.Configuration: 2x PA-5220's in HA (Active-Passive)Code: 8.0.11-h1 (Moving to 8.0.12 per PA recommendation) Initial Issue: Started having Commit failures on our Primary PAN. After some troubleshootin...

hank08 by L0 Member
  • 4943 Views
  • 2 replies
  • 0 Likes
  • 24395 Posts
  • 123 Subscriptions
Top Solution Authors
Labels