General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4235 Views
  • 0 replies
  • 0 Likes

Dynamic update error " Failed to upload image..."

While trying to push dynamic updates from Panorama to managed devices it is failing for some of the devices(PA-200)It gives an error " Failed to load image.."We have checked the licenses of the devices for which dynamic updates are failing and found that it is valid.Also the PANOS version of Panorama is 6.0.4 and the managed devices PANOS versio...

tac.in by L3 Networker
  • 7090 Views
  • 3 replies
  • 0 Likes

Rest API for CPU utilization

Hello, I'm trying to create a Rest API URL to check the CPU utilization on my management and data planes and create a report to monitor over time. Using commands like show running resource-monitor did not give me exactly what I was looking for. I used the <firewall ip>/debug and got the following XML: <response status="success"><...

ha sync issues

I am have trouble with intermittent synch failures between my primary and passive firewalls. I am currently at OS7.1.16 and TAC told me that to fix my sync issues I need to upgrade to 8, Any thoughts on this

jdprovine by L4 Transporter
  • 6251 Views
  • 11 replies
  • 0 Likes

Resolved! Vsys + Failover config (Urgent!)

Hi,I am very new to PaloAlto and currently trying to figure out the following: 1. is HA or Failover VSYS specific? 2. if so, how do I find failover/HA config per vsys?3. How do I setup failover/HA per vsys? the appliance i am using is PA-3020 software version 7.x. I will really appreciate your help with this. Kind regards,Ali

qasim02 by L2 Linker
  • 7573 Views
  • 7 replies
  • 0 Likes

Troubleshooting GlobalProtect client postvpnconnectcommand

Hello Community, for a customer we are trying to install the GlobalProtect client on 100 laptops. this works great the laptops connect to the netwerk using the globalprotect client. the problem we have that the postvpnconnectcommand is not running the command we want it to. it should be running an drivemapping batch file so users are able to acc...

Panorama zero window size

Hi, we have an HA pair of M-100 Panoramas which were running fine until we attempted to upgrade the memory to 32GB to be able to run version 8.1.3. The passive Panorama went fine but the active would not boot after the memory was upped so a replacement was sent. The box was swapped and config applied then memory installed and upgraded to 8.1.3.F...

Martfalc by L0 Member
  • 4247 Views
  • 2 replies
  • 0 Likes

tcp out of order

I am trying to diagnose why I am unable to access some server via ssh and the VPN. I have done a packet trace and the results were concerning tcp out of order and retransmission. So what is the best way to find out why?

jdprovine by L4 Transporter
  • 16663 Views
  • 7 replies
  • 0 Likes

WildFire file size limits

I'm trying to figure out whether our file size limits for WildFire are set appropriately. I have been unable to find a good way to determine whether there are files that aren't being uploaded due to their size. Would that show up in our logs? I've also discovered the WildFire logs don't include a column for file size, I need to look at the detai...

Resolved! Get vulnerability description and signature

How do I get the signature on what a Vulnerability has triggered?I can only see the Threat Name and its ID in Panorama and look up the ID in the Customer Portal.But there does not stand what combination or findings actually lead to this attack. Where can I get this information? Thanks in advance.

Missing IP's in Minemeld feed

We pull Zeus IP's using minemeld. Statics page shows the current number of IP' 109, which is the same as hosted on this URL. https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist Every few months i got notified to comunication with one of theses IP's and when i check the zeustracker.abuse.ch shows the IP in the list but the output is ...

image.png
image.png
raji_toor by L4 Transporter
  • 5507 Views
  • 2 replies
  • 0 Likes

Not seeing a customized prototype in GUI

Hello team! I hope you are doing alright. Currently, I am trying to add a customized miner prototype and while creating it in the /opt/minemeld/local/prototypes/ folder, I am not able to see in added in the GUI. What could be the problem here? Thanks in advance! Best regards, Petar

where to define a static public IP for IPsec

Hi I have to build up a IPSec tunnel with a partner. So at Network -> Interfaces -> eth 1/1 I have my connection to internet with a /28 Net. I call it for example 12.34.56.144/28 net. There the router from my isp is IP 12.34.56.145. I will build up my tunnel on ip .146. Now on the eth 1/1 I define the IP 12.34.56.146/28 so the complete /28...

Resolved! Large Varying IP Pools for DNS (CB Defense dev-prod05.conferdeploy.net) And Firewall Rules[SOLUTION]

First I would like to say that we are pursuing this with CarbonBlack and we have worked with PAN support already to see what our options are. This is as much an informative post as it is to see what other people think and are doing.For the record PAN support suggested changing the DNS entry from a lookup to a FTP file check. We would prefer to...

BrianRa by L3 Networker
  • 13071 Views
  • 10 replies
  • 0 Likes
  • 24358 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels