General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 2176 Views
  • 0 replies
  • 0 Likes

Resolved! ICMP reply from the firewall instead of endpoint destination

Hello everybody,


What could cause ping to respond from a different IP?
When tested from source, the response message of the ping command is successful and it's coming from the PaloAlto firewall, not from the destination IP.
Where and how can I verify on

...

000000 by L1 Bithead
  • 3577 Views
  • 2 replies
  • 0 Likes

New Feature request or ?

Hi

 

I would like to have apolicy that just logs and does nothing else - ie the packet keeps getting evaluated.

 

some times I want to know there is packet there but not process it with that line.

 

Can this be done already ?

Azure Site Recovery Miner - XML source into Minemeld

I'm looking to do, what I believe, would be a simple minor for Azure Site Recovery IP list.  The list is located here and is in XML form.  

 

https://aka.ms/site-recovery-public-ips


I have bounced around on some articles and tried to follow a few, bu

...

Jmarx1 by L1 Bithead
  • 4005 Views
  • 1 replies
  • 0 Likes

Resolved! Moving Colo Datacenter

Hi folks,

 

We got some dreaded news that our colo vendor is not renewing lease and we are now moving.

We have two 3020 firewalls configured in HA.

 

I am looking for any general comments that could help in my direction.

 

One thought:

  • Break HA.
  • Take secondar
...

OMatlock by L4 Transporter
  • 6141 Views
  • 7 replies
  • 1 Likes

Palo Alto against spam

hello

İn the network users get many spams.We dont have any other anti-spam solution.Is it possible to stop spams by Palo Alto NGFW?

Radmin_85 by L4 Transporter
  • 10680 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect Migration Assistance

Hello!

 

So, we inheritted an infrastructure with a few hundred VPN users whose Global Protect clients were all deployed pointing to the IP address of the GP Portal (not an FQDN). And, of course, we are now in a position where that physical site (and i

...

locampo by L2 Linker
  • 8786 Views
  • 6 replies
  • 0 Likes

Aruba AP Tunnel Problem

Hello, I'm having problems with Aruba AP connection through a FW.

 

I got my APs in the inside zone, and the controller is in a DMZ. Previously I had a security rule that allowed aruba-papi and syslog app and the AP connected to the controller without

...

gmunoz by L1 Bithead
  • 7788 Views
  • 3 replies
  • 0 Likes

Youtube working from - youtube application in phone

Hi Team 

 

as per the requirement youtube needs to be blocked , 

we have blocked youtube with applcation , url category and it is blocked on browser. 

but when customer accessing the youtube application it is not getting block even though it is hitting t

...

Rameshwar by L3 Networker
  • 2290 Views
  • 1 replies
  • 0 Likes

inbound ssl decrypt and iphone

Hi

 

Seems like I am having issues with iphones and inbound ssl decrypt with 8.0.12

 

any one else having this issue. seems like 0-200k of data is okay, after that ... dies in the arse

A

Trigger/logs DoS policy

Hello,

 

We would like to be notified when there is a high number of requests to our servers, and even to control them in time. Aside to be able to see an event in the logs (as it is the case with the flood in the sessions)

 

The configuration we are loo

...

BigPalo by L4 Transporter
  • 3276 Views
  • 2 replies
  • 0 Likes

Can't Update License from License Server

I recently bought a used PA-200 off ebay just to play with and learn on. It's been factory reset and has no licenses loaded. I am unable update the license from the license server. I do not have a support contract. I suspect I'm just hosed, but wante

...

Resolved! GlobalProtect with Certificate Profle

I have configured GlobalProtect to use Authentication Profile using LDAP (sAMAccountName) and a Certificate profile.

 

I have user certificates pushed through Group Policy.  The configuration works. However, I noticed a few things

 

1) If I login as User

...

ce1028 by L4 Transporter
  • 6840 Views
  • 5 replies
  • 0 Likes
  • 24249 Posts
  • 119 Subscriptions
Top Solution Authors
Top Liked Authors
Labels