General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1187 Views
  • 0 replies
  • 0 Likes

Log forwarding - Filtering and Auto- tag not working

Hi there,

 

I had setup Log forwarding profile, where I am sending All logs to syslog server. Thats working great.

 

Then I added one more line where I am filtering threat logs for (severity eq critical) and (zone.src eq internet_zone)

 

Checking f

...

LogForwarding.png
MatchingList.png
filter.png
Action.png

Nested Device Logging

Hello, 

 

We have set up some nested device groups, to allow for easier policy management and, as expected, when viewing traffic in Panorama we see the logs for both device groups in the parent device group and only child device group logs in the chi

...

Firewall is not forwarding logs to the Syslog server

Hi everyone! 

 

I am kind of bummed on why my syslog configuration is not taking effect.

 

I have 2 pairs of firewall, PRD(2 firewalls) and DR(2 firewalls). Both are in HA setup and managed by Panorama. My syslog configuration in DR and PRD are just

...

Multicast - troubleshooting

Any tips/advice how to test multicast? Should I be able to do a ping from a firewall interface included in the Interface Group to a multicast address as a test?

 

Also from Runtime Stats on the VR, I do not see anything showing under the Multicast ->

...

clewis1_0-1724153163868.png
clewis1 by L3 Networker
  • 1060 Views
  • 1 replies
  • 0 Likes

Resolved! Roll Back GlobalProtect

Does palo seriously not provide a way to roll back GlobalProtect?  TAC told me there is no documentation on how to do that. 

PANOS upgrade plan in excel sheet for a year

Hello Experts, 

 

 I have been asked to provide a plan to upgrade Palo Alto firewalls within a year and I have almost 430 Palos in the environment. I need help creating a sample plan with timelines and what columns I should use in this plan. If someo

...

p.mohan by L1 Bithead
  • 1255 Views
  • 4 replies
  • 0 Likes

New to the community

Hello all,

I am working as a Security Engineer currently and I am learning and working on Palo Alto Networks.

 

During exploring, I came across Palo Alto LiveCommunity and I see there is so much technical content here to browse and learn.

 

I am look

...

Config Audit Failure

Hello~

 

Does anyone know this failure message that we use Config Audit for compare configuration?

 

Thanks!

 

(PA-3020, v6.1.4)

 

Failed to create config file!

 

image002.jpg
neilwu by L2 Linker
  • 7479 Views
  • 8 replies
  • 0 Likes

Webpages are loading very slow

Hi!

 

Me again, I apologize. I am currently out of troubleshooting tricks.

 

So here it is. I have configured my Source NAT, outbound-to-internet and default route. All are good. No issue. Traffic is hitting the correct Rule and NAT.

The thing is, th

...

slow GUI

Hi,

why my GUI is soo slow ? I have to wait 10-15 sec for new clicked tab to open. (Main Menu on top)

Does anyone of you have the same problem?

My PA is PA-2020, software version 4.0.3

How to deregister CSP User Account when SN is expired

I don't need to use Palo Alto products anymore. So, I want to deregister my CSP account.

At current, the SN I purchased is expired. Therefore, I cannot create case to request account withdraw from CSP.

Could anyone guide me to deregister my account?

...

HLiu9 by L0 Member
  • 1172 Views
  • 1 replies
  • 0 Likes

Resolved! Superuser (read-only) Not authorized to access

Hi everyone,

 

I am trying to get TACACS working between our PA and Aruba Clearpass authentication server. I have successfully done this for full admin as well as a custom role on the firewall. I am however running into issues with a service account

...

  • 24171 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels