This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Log percentage and space

If logging is set to allow up to 95% space on the disk and it hits 95% that same partition,/dev/md6 3.8G 3.2G 454M 88% /opt/panrepo - PAN-OS Image repository.(Device/Software), resides the PAN OS what happens when you hit 95% on logs and try to install a new OS

jdprovine by • L4 Transporter
  • 4574 Views
  • 6 replies
  • 0 Likes

Resolved! Wrong IP calculation after Whitelisting on MineMeld

Hi, I have installed MineMeld and it works fine. Before creating our configuration I wanted to test something on Whitelisting as it is going to help on what we are aiming to do with MineMeld. I hope the below finding is a configuration mistake or something i have missed and not an issue in MineMeld. Simple when i whitelist two IP from a...

StamL by • L0 Member
  • 5769 Views
  • 3 replies
  • 0 Likes

Intrazone Rules

Hey guys,I took over a Palo Alto Firewall and I noticed that there is a intrazone allow rule at the end for every single internal zone.So source zone: internal zone xysource address: anydestination zone: internal zone xydest address: anyapplication: anyAction: allow these intrazone allow rules are placed before the intrazone default deny rule. W...

MPI-AE by • L4 Transporter
  • 7857 Views
  • 6 replies
  • 0 Likes

Resolved! When to use ZoneProfile and DoS Profile

Hello All - Can i understand that Zone Protection Profile is to Protect Firewall itself and DoS Protection Profile is to protect the servers and hosts behind the firewall from Internet?Can i achieve a DoS protection (For example SYN Flood attack) only by configuring DoS Protection Profile that will be tailored with Policy Rule with source and de...

"Install media mount failed" when trying to create bootstrap USB

I am attempting to create a bootstrap USB on a PA-200. The Palo site provides pretty good procedure documentation, but not much for troubleshooting. I have managed to create the bootstrap.tar.gz file and upload it to a PA-200 running Pan-OS 8.0.3. I have tried 4 different brands/models of USB sticks, but when running the create bootstrap process...

GlobalProtect - Windows 7 Issue

The company I worked for observed an unusual error today with just Windows 7 users of GlobalProtectWindows 10 & Macos users were unaffected. We use okta verification to allow authentication btw In a nutshell, did some testing in virtual machines running latest patched version of Windows 7 and Windows 10All windows clients were able to connec...

capita.png
Windows 7 2018-09-13 16-01-38.png
Windows 10 2018-09-13 16-08-02.png
carterg by • L2 Linker
  • 11813 Views
  • 3 replies
  • 0 Likes

Resolved! CDR report

Did anyone receive a threat report from palo alto and hushly? "Here is your Palo Alto Networks - 2018 Cyberthreat Defense Report you requested"

jdprovine by • L4 Transporter
  • 3093 Views
  • 2 replies
  • 0 Likes

Resolved! Traffic Reports Bytes Field Empty

This probably has a very obvious answer, but google searches for the solution wound up showing me irrelevant pages...probably my fault as well. I am running various traffic reports, and all of them lack value in the bytes field. Any idea what is wrong?

2018-10-03 07_52_18.png
colesch by • L2 Linker
  • 4196 Views
  • 4 replies
  • 0 Likes

Panorama - Commit getting stuck at 0%

I have got PAs in two DC, each DC have PA in active-passive unit, when I commit to one of the pairs in one of the DC, the committ is stuck at 0%. I see the Panorama is connected to "Passive" FW instead of the active FW , could be the reason why the commit is stuck at 0%.Does the Panorama have to be connected to the active unit for the commit to ...

Resolved! MineMeld can not get O 365 JSON format list

Hello [Failure event]In the case of O365 's xml format, when MineMeld received traffic after ClientHello, I got a list but if I set config for JSON support I can not get a list. [Prerequisites]MineMeld will go through Paloalto and do Internet communication. [Question]I think that the packet flow that can be checked with Paloalto is incorre...

OSPF, VPN, routing and distribution

I'm trying to solve a routing conundrum to improve a remote site and provide redundancy, and hoping others may have some solutions. The short version is that we have the remote site with basic commodity internet using VPN to connect back to two datacenters. The datacenters in turn have direct links to each other, and all are running OSPF. The is...

PAN OSPF.PNG

Resolved! 802.1x wired authenicaton with MS CA and paloalto

Dear Sir,I am beginner in 802.1x authenication and paloalto.So please help explained and guide.I want to use 802.1x with MS CA.Can i use paloalto firewall as a policy enforcer for 802.1x authenication ?can use PA as a radius server for user log and mornitor ?

crypto by • L2 Linker
  • 5620 Views
  • 1 replies
  • 0 Likes

Authtenticate non web services such as Telnet/FTP without Global Client

Migrating a Cisco fw to a Palo Alto and the Cisco has the ability to authenticate users to external Radius for FTP transfers based upon policy rules - the end user simply gets a user name and pass prompt which works across all platforms and can be scripted for automation. I know the Palo Alto has the ability to auth requests that are web based ...

Juan_R by • L0 Member
  • 3239 Views
  • 2 replies
  • 0 Likes

Resolved! MFA "SSL Connect Error"

I am testing Multi Factor Authentication with Okta. I have configured everything (including certificate profile) as per the guide as well as Okta specific YouTube video, The first factor (active directory auth) is working fine, however, I am getting "SSL Connect Error" in the authentication logs. I could see the 443 connections going to Okta. Ho...

  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks