General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Inability to switch contexts 8.0.10 M-100 Device

Hello all,

We have a M-100 device that has 120 devices currently connected to it.As of February of this year we have not been able to context switch to about 5 of the devices from our primary unit. This includes it will no longer push apps and threats

...

WilliamT by L0 Member
  • 1286 Views
  • 0 replies
  • 0 Likes

Upgrade for HA Pair

Hello, i am looking for some guidance on upgrading a non panorama setup of an Active/Passive HA pair of 3050s.  They are running code 7.1.6 and we would like to move to a later/latest release of 7.1.x

 

i have searched around but can only find a guide

...

Resolved! Recommended stable release for PAN-OS 8.0.x

Hi,

 

I am planning on updating PAN-OS on our Panorama virtual machine and our two firewalls and would like to know what the most stable release for PAN-OS 8.0.x is? Any help with this query would be greatly appreciated.

Resolved! nt-autorität\anonymous-anmeldung

Hello Guys,
I have sometimes a problem with the user identification on the PA500. Our Users can only browse the internet with your AD-User. Sometime the User is lost on the PA. The User "nt-autorität\anonymous-anmeldung" is used? Why? How can I find a

...

Dual WAN (ONE ISP and MPLS link)

 Hello All,

 

Need your help/guidance on the following requirement

 

We have 2 WAN links, One ISP with Static public IP and  MPLS connection for Internal server access.

 

Requirement: 1) All the Internal users (Trust Zone) has to go through ISP Wan for Int

...

Sharan.k by L0 Member
  • 1985 Views
  • 2 replies
  • 0 Likes

Resolved! User-ID Agent exclusion list

Hi All

 

Is it good practice to exlude all server subnets in exclude list as I believe we are not interested in administrators to IP mapping for servers?

 

What could be the user cases for exlcude list on firewall and user-id-agent?

Template stacks limitations

Hey all,


I think I am hitting a limitation on the template-stacks, but maybe there is a nice workaround that you guys can help me with...

 

Contrary to Device groups, which have "shared" objects, templates use stacks which is a little different.
The limi

...

mr.linus by L4 Transporter
  • 6007 Views
  • 4 replies
  • 2 Likes

Resolved! User-ID based policies exclusion

Hi

 

I want to enable user-id features in all security policies. But I have a question, from users to Domain controller, I should not use user-id feature? as firewall does not know about user-ip mapping untill users are login to domain controller?

Also

...

Resolved! Zscaler and Minemeld v2

Hello,

 

I'm trying to get simple data from https://ips.zscaler.net/pac/json. I tried to exploit the extractor with http://jmespath.org/ but really, I don't think I need an extractor here, just indicator "ip".

But it doesn't work :

age_out: defau...

GlobalProtect Client is not Connecting

 Hi there , 

 

i'm new here , hope i get a reply  

 

i'm using an ipsec tunnel between two site .

 

in the second site i'm not able to use the globalprotect , he cannot connected .

 

but , when i change the desktop dns to 8.8.8.8 it worked . 

 

any solution !

...

Resolved! Issue with Windows Insider Updates when using SSL Decrypt

PAN-OS 8.0.x

We have users not receiving updates for Windows Insider Program builds when SSL decryption is enabled.  

 

Does anyone know what changes need to be made to make this work?  I've solved a few other SSL decryption issues where decrypt-excepti

...

DMast by L2 Linker
  • 6549 Views
  • 9 replies
  • 0 Likes

Non-reordered IoC feed

I have an IP IoC feed that I would like to ingest and re-publish via MM.

 

The feed is ordered by priority i.e. earlier addresses are newer\more active\higher risk, but if I ingest and publish (miner -> output) it is re-ordered by numeric order.  Is

...

apackard by L4 Transporter
  • 2303 Views
  • 1 replies
  • 0 Likes
  • 24131 Posts
  • 102 Subscriptions
This widget could not be displayed.
Top Solution Authors
Top Liked Authors
Labels