This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

How to find active high bandwidth user

If a Palo Alto firewall is experiencing high throughput, what's the best way to find the source user/IP while the high throughput is occurring?We have all of our security policies set to log on session end, so that traffic log wouldn't help since the session would still be open.The Session Browser kind of helps, but the inability to filter for t...

jambulo by • L4 Transporter
  • 11378 Views
  • 4 replies
  • 0 Likes

Custom report emails blank??

I have 4 custom reports that if I 'run now' they display relevant information. But once I put them in a group and scheduled them to email/run everynight they come through blank with the message 'There is no PA-report-01 report on Sunday, Mar 18.' Under 'Report Groups' I had them selected under 'Custom Report' but changed to them 'Log view' ...

drewdown by • L4 Transporter
  • 10551 Views
  • 14 replies
  • 0 Likes

User-ID and Microsoft Entra ID Internal

We recently setup our CIE to work with our Microsoft Entra ID so when on GlobalProtect, we can track users and their traffic. We are now looking for solutions for a similar setup for internal users (not on GlobalProtect but on network). We are trying to avoid using direct AD access since Entra ID is our source of truth. I have seen a few optio...

packet dropped no route for ip multicast

Hi Team, I have a multicast setup. I am able to see that the PIM neighbourship is completed and igmp membership also fine.I can see my traffic in multicast fib with the correct incoming and outgoing interfaces. but the multicast packet is not reaching receiver, I can see a lot of packet drop in counter with detail "packet dropped no route for ip...

Any big issues with preferred release 10.2.10-h9?

Hello. We're preparing to upgrade ~20 firewalls (mix of 800-series and some VM series) to 10.2.10-h9 to address CVE-2024-0012. Wondering if anyone is running 10.2.10-h9 now and how things are working? Any issues with Global Protect? We're heavy users of it. Curious about "PAN-259769 GlobalProtect portal is not accessible via a web browser and th...

cmonte29 by • L1 Bithead
  • 2463 Views
  • 1 replies
  • 0 Likes

Secondary FW not sending alerts

Hello, I have a pa 450 HA set up. I configured alerts to send an email anytime an administrator logs in or a change is committed. But these are only sending from the primary firewall; if I log into the secondary FW no alerts are sent. Is there a way to configure the secondary firewall to also send alerts for logins and commits?

xmlapi: query not available

Hi everyone, I'm trying to get the Prisma Remote Network details via an API call.From the Panorama webgui debug page, I'm able to do this... like you see here: that red line has all the information I want with via an API call,so I tried:wget --no-check-certificate -qO- 'https://<panorama-ip>/api/?type=op&cmd=<request><plug...

DieterV2_1-1607433437133.png
DieterV2 by • L1 Bithead
  • 4302 Views
  • 3 replies
  • 0 Likes

Need assistance with PA-445: general setup/VR

Hello Everyone, I need a little assistance I am new to Palo Altos...I have just received and trying to set up an PA-445...but I ran into the following issues: - no incoming traffic hitting on anything (outbound traffic is OK: computers plugged into PA-445 on other ports can reach Internet) - I would like inside computer 192.168.0.57 to have tr...

Resolved! Downloaded Firmware from Active Firewall doesn't show up on Passive - PA-460

Hi, I have downloaded a software release from Active Firewall and already sync to HA Peer, but when we tried to upgrade Passive Firewall. The downloaded version doesn’t show up. I have also tried uploading the software release manually but it showed the software already exist. What else should I check on this? Thanks

Al-Zuhri by • L0 Member
  • 1703 Views
  • 2 replies
  • 0 Likes

Admin console unreachable/cant remote in or ping - PA support wont let you submit a ticket without a TSF file - which you get via admin console

Very frustrated with this - PA portal requires a TSF file to submit a ticket. We cant generate one, because our portal is unresponsive. Tried calling and going through telephone support and it redirects to portal support and hangs up. Anyone have a number to a real person?

Issue GP Linux - URL Browsers

Hi, I am experimenting a very strange behaviour with Global Protect when connecting to my work from my home. I am able to connect to the VPN of my work and even doing ssh to the server in the private network, but when I try to surf the web, the browser does not show anything. When I disconnect from the VPN, I am not able to connect to the serv...

BigPalo by • L4 Transporter
  • 2953 Views
  • 4 replies
  • 0 Likes

Resolved! Disable VPN services: Portals and Gateways

Hi Guys, I am newbie with PAN world. My Company don't use VPN. And I just want to disable VPN service. I my PA i see Portals and Gateway have been config. - Portals: I already disable login page - Gateways: Don't change anything. My way to disable VPN is right or wrong. Do I need to remove all setting on Portal and Gateways to make sure VPN al...

SNguyen216298_0-1732596241730.png
SNguyen216298_1-1732596263855.png

Response Pages pushed with Panorama

Hello- I am looking to push a custom response page out from Panorama to several PA-500's. As part of the configuration of the response page, there is an HTML file that I am uploading to Panorama. Can someone tell me if the HTML file can be copied out to the PA-500's as part of the commit process originating from Panorama? I have basically conf...

Alerts: - Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)

Hello Friends Our XDR system recently reported a lot of these warnings, "Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)". Through information from XDR from the user's computer that has queried a website through Google Chrome or MS Edge. The investigation activity gets the user's access information tha...

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks