General Topics

Palo Alto firewall does not display traffic log

Palo Alto Firewall 8.0.3-h4 integration with ISE document

Hi,

Is there any document for Palo Alto configuration to integrate FW login authentication with Cisco ISE.

Intermittent firewall/application issue

Hello,

I apologized if i posted i the wrong area.  To start off with, we just got our PA-820 recently.  We have a weird issue, where one day an application will work without problems and another day the Instant Messaging part of the app fails to conn

Exporting Application Groups

Is there a way of exporting Application groups from one Panorama and importing to a different Panorama? I am trying to move my groups over for a GPCS POC.

NOTE: GlobalProtect Cloud Service has changed to Prisma Access.

IPSec Tunnel Question

I have a IPSec tunnel up where the Peer IP is the same as the Remote IP (Proxy ID - Remote).  The Tunnel is up, but traffic destined for that Remote IP isn't traversing the tunnel.  Typically, there is a Private IP as the Remote and a static route co

Packet flow not properly defined

Hi Team,

i have seen two diagrams of packet flow from palo alto website. in Below NAT Policy evaluated is shown in first step. which is part of Network processor (slow path) and NAT applied after  Application  and security Policy it means from securi

Agentless vs Agent based User-ID

Hello,

We have 500 users on site and currently using Agentless User-ID with PANOS 7.1.7

We are thinking of scaling up to Agent based. 

Can someone please guide me to a link/article that discusses the Pros and Cons of both? 

What are the common issues

MineMeld engine:fatal message

I'm getting the below message in my minemeld logs and not sure what is causing it  

2018-07-11T00:30:28 (16652)config._destroy_old_nodes INFO: Destroyed nodes: [_ConfigChange(nodename=u'Amazon_IPv4_Agg_General', nodeclass=u'minemeld.ft.ipop.Aggrega

Security Policy Default Columns

How can I modify the Security Policy default columns and order for all users, not just my view? 

PAN-OS for refurbished Lab Appliance

Hello,

I've bought a refurbished PA-500 for my lab.

Is it possible to get current PAN-OS images for this device?

Regards,

Martin

Supressing Application Dependancy Warnings.

On our "SKYPE" rule I have removed web-browsing, this causes dependancy warnings on commit.

I read this "solution"

https://live.paloaltonetworks.com/t5/Management-Articles/Application-Dependency-Warnings-with-Allowed-Enabler-Application/ta-p/55142

Bu

User or group

Can you add a user group under the user tab in a security policy