General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 285 Views
  • 0 replies
  • 2 Likes

Qradar couldn't connect MM Taxii output

Hi Guys,

 

It seems issue happend at Minemeld side.

 

This is error from Qradar Threat Intell app "There is a problem connecting to the TAXII server. Verify that the TAXII server is available. Get list of collections failed."

 

This is error from Minemeld

...

Woranon by L1 Bithead
  • 4261 Views
  • 3 replies
  • 0 Likes

Resolved! User-ID Agent placement (Domain Controller)

Hi all,

 

I've read the best practice guide and I can't see anything that says the agent SHOULDN'T be installed onto a domain controller.

 

Any experiences with that here?

 

We currently have the agent installed onto two Windows Server 2012 R2 member serve

...

Slow throughput on newly installed PA-820

Hello all...I have a newly installed HA pair of PA-820.  Our ISP circuit is 50Mbps/50Mbps.  Testing from a LAN pc, I am only able to download a max of 14Mbps using speedtest.net or speakeasy.net.  I have called Palo Alto support and they suggested se

...

PAN-OS 8.0 Upgrade Blocking Nexflix

I recently upgraded my home PA-200 to PAN-OS 8.0.1 from 7.1.7.  All seems fine, except that from two Samsung smart TVs Netflix streaming is affected.  A diagnostic test on one of the TVs shows that the app is able to connect to 1 of 4 Netflix servers

...

Sbarlock by L1 Bithead
  • 8797 Views
  • 8 replies
  • 0 Likes

Resolved! New site to site VPN creation with same proxy IDs

Hi

I have a HQ PAN connecting to a remote ASA and IPSec is up with static routes and proxy IDs. Have installed and configured a new PAN parallel to remote ASA which is going to be replacing it

Question is, can i have a new VPN configured in HQ to new r

...

mhamid by L1 Bithead
  • 2804 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama and Solarwinds SCP for Scheduled Backups

I have SCP running on windows host, Solarwinds

 

Can I please ask if anyone has this working successfully?.

 

Palo support seem to suggest that the SCP server needs to be Linux host

 

Thank you

Ajaz Nawaz

JNCIE-SEC No.254

CCIE-RS No.15721

nawaza by L2 Linker
  • 5605 Views
  • 5 replies
  • 0 Likes

Should sub interfaces be graphed

We have aggregate interfaces under which we have created sub interfaces. The graph for aggregate inerfaces displays expected avg/min/max but the sub interfaces are displaing very unexpected avg/min/max. 

 

image.png
image.png
raji_toor by L4 Transporter
  • 2197 Views
  • 3 replies
  • 0 Likes

Resolved! SSL Decryption - Enterprise CA

Hi Everyone,

 

Recently a decision was made to implement SSL Decryption for outbound inspection.  We work within a Microsoft PKI environment and are experiencing issues in signing the CSR generated by the firewall.  I create the CSR based on the "how t

...

cafowler by L2 Linker
  • 6845 Views
  • 4 replies
  • 0 Likes

What's new in MineMeld 0.9.9

Release Date: 2016-04-19

 

How to update: Updating MineMeld

 

UI

- new logo

- new you can edit and create a local version of an existing prototype, just press NEW at the top of the prototype view

 

Nodes

- miner for JSON feeds

 

Prototypes

- prototy

...

Screen Shot 2016-04-19 at 17.44.10.png
lmori by L7 Applicator
  • 6844 Views
  • 4 replies
  • 1 Likes

Update List Using REST \ similar

Maybe a stupid question and\or I've missed the obvious...

 

One of the issues we have with our Palo firewalls is - when we deploy 'active' IPS rules (block-ip etc) the maximum length of time is 3600 seconds. 

 

We have a log solution that we use to t

...

apackard by L4 Transporter
  • 16774 Views
  • 12 replies
  • 0 Likes

Deploying Minemeld Using Vagrant and Virtualbox

Hello All,

 

Based on @lmori's great guide for doing a manual install of Minemeld on Ubuntu 14.04, I have taken his configurations and wrapped them in a Vagrantfile for easy foolproof deployment of Minemeld. It's a simple 3 step process:

 

  1. Install la
...

nbilal by L3 Networker
  • 12383 Views
  • 2 replies
  • 9 Likes
  • 23644 Posts
  • 107 Subscriptions
Top Liked Authors
Labels