This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! OS Upgrade path to 10.2.10-h9

Hello.I am currently using PAN-820. The OS is 10.1.9-h3. What is the correct way to upgrade? (I will upgrade to 10.2.10-h9.) 1. Upgrade to 10.1.14-h6, then upload 10.2.0, then upgrade to 10.2.10-h92. Upload 10.1.14-h6 and 10.2.0, then upgrade to 10.2.10-h93. Upload 10.2.0, then upgrade to 10.2.10-h9 What is the correct way? I cannot receive ...

danudan by • L0 Member
  • 2055 Views
  • 1 replies
  • 0 Likes

GlobalProtect Portal require :443

Hi All, I have an issue where we need to input <firewall IP Address>:443 in order to connect. But some of my users does not require the :443 to connect to the VPN. Screenshot as shown below, Any way that i dont even require :443 to be connected to the VPN?

KevinNg_0-1726118355889.png
Kevin-Ng by • L2 Linker
  • 5123 Views
  • 7 replies
  • 0 Likes

Resolved! My PA-1410 logs for single day, why? how to solve?

Hello Team, My new PA-1410 logging is not more than a single day when checking the traffic logs. Previously I had PA-3220 I could checked months of logs. whats wrong here in the PA-1410 loggin settings? manager@PA-1410-Main(active)> show system logdb-quota Quotas: system: 4.00%, 0.726 GB Expiration-period: 0...

Inbound TLS/SMTP inspection (to FortiMail)

Hi,I'm wondering if anyone happens to be doing successful inbound inspection of SMTP/TLS to a FortiMail appliance? Or any other mail server for that matter. I've run in to a brick wall when it comes to renegotiation. The Palo is serving the correct certificate and a manual connections using openssl (openssl s_client -debug -connect mx1.XXXXX.co...

Screenshot 2021-02-04 at 14.43.04.png
pkaren by • L1 Bithead
  • 4252 Views
  • 2 replies
  • 0 Likes

I’m facing an issue with L3 int which is configured on Palo Alto firewall

Hi Team, I’m encountering an issue with Poly devices on VLAN 20, which is routed through the firewall with its L3 interface configured. The devices successfully pair at first time with Teams but after a reboot they fail to maintain pairing afterward, despite having a rule that allows all traffic from the VLAN 20 . Interestingly, when these de...

upgrading PAN-OS

Hi I want to upgrade the 8.1.x to the latest version , after two upgrade stay on 8.1.24. I tried to move to 9.0.X but failed. Could you please let me know how I can upgrade to 9.x? (As information that I have find need the Preferred release It means 8.1.25, but I cann't find it) Thanks

Resolved! Are there signature release for following vulnerabilities?

Hi,I'm Tomoyuki Nakamura. Are there any plans to release signature for the vulnerabilities below?.These were not listed in THREAT VAULT or Security Advisory. CVE-2024-11639CVE-2024-11772CVE-2024-11773CVE-2024-37377CVE-2024-9844CVE-2024-37401CVE-2024-11633CVE-2024-11634CVE-2024-47578CVE-2024-47590CVE-2024-54198CVE-2024-47586CVE-2024-54197 B...

Resolved! using Subinterfaces in different Vsys inder same phy interfa

Hello Team, We are implementing a physical interface under vsys Data-center , with subinterface (Eth1/200 --> Data-center) and other subinterface (Eth1/300--DeptA) is assigned to other vsys called DeptA. knowing that the physical interface is without zone . How does the communication will be authorized in the security policies and with the ...

Support wait times and SLAs

I am in the call queue since 3 hours. Called in yesterday and left a call back number, but never received a call back. Does anybody have a similar experience lately?

uvolk707 by • L1 Bithead
  • 2001 Views
  • 4 replies
  • 0 Likes

Resolved! Pipe a command and using match regular expressions

Dear experts!I'm trying to compile a match which matches the following regexp: (debug|monitor).(global|level|pcap|detail\.enable) but it seems like it does not support capturing groups. I've searched for a manual for the match command but struck out. The end game here is to use it to filter show system state to capture lines containing:debug.gl...

epacke by • L0 Member
  • 17098 Views
  • 4 replies
  • 0 Likes

Equipment: PA1410 (PAN-OS 11.1.4-h1) Threat Logs is not monitored every time

Equipment: PA1410 (PAN-OS 11.1.4-h1)Issue: Some threat logs are not seen in output.Details:・The vulnerability protection alert test was performed 4 times on PA1410 with reference to the following page.https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClpPCAS-1st time (2024/12/14 15:29:58): A threat log was seen as output ...

Resolved! PA-440: Bottom Face Screw Mounting Footprint

I am looking to add the PA-440 to the Elevator Model I am working on, but because of limited real-estate, we do not have room for standard 1U server rack, and have to create a custom enclosure to house the firewall. I am looking to mount the PA-440 to the enlcosure, but cannot determine what is the bottom facer screw mounting footprint as seen...

Resolved! Importing list of Blocked IP's and URL's into EDL

Hi, I want to be able to quickly blacklist a bunch of URL's and IP's from internal uers going out to the internet. What is the best way to achieve this? Would I just place them all in a file text file, and just import them to a custom External Dynamic List? Thanks for the help in advanced.

Resolved! Panorama Disk

We have Panorama VM with 1tb data disk. I am not able to add 2tb disk. Gives me an error due to this 1tb disks. What can i do?

chens by • L3 Networker
  • 1974 Views
  • 3 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks