This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4233 Views
  • 0 replies
  • 0 Likes

Site to site VPN help :(

Unable to make VPN work. Both "IKE Info" and "Tunnel Info" are red light in IPSec Tunnel.The peer is a Juniper vSRX.Normal configuration with trust, untrust and VPN zone in both firewall. Each zone has its own subnet.Both firewall can ping each other untrust interface.Workstations behind the firewalls can ping firewall's untrust interface too (d...

jeremylo by • L3 Networker
  • 8227 Views
  • 5 replies
  • 0 Likes

VM-Series firewall on VirtualBox

Hi,I know that VM-Series firewall requires VMware ESXi running vSphere 4.1 or 5.0.But I don't have VMware right now on my laptop and only I have is Oracle VirtualBox 4.2.6 - just for tests and presentations (not for commercial purpose)On VirtualBox I've already imported vmdk file but when I launch PA-VM I see: 'Welcome to the PanOS Bootloader. ...

Clientless VPN

Hi All, can someone provide configuration example for Clientless VPN access through GP portal...I was already used configuration steps explained on this page, but seem that it not helped in my case. I'm able to authenticate and open portal landing page with published app, but there is no response of it. I'm pretty sure that all steps of configur...

Tician by • L3 Networker
  • 6582 Views
  • 5 replies
  • 1 Likes

Dynamic Routing on MPLS network with IPSEC VPN as backup route

We are new to the Palo Alto community and are looking for some advice as the best way to accomplish our networking end-goal. We have several remote offices that are currently connected to corporate using an IPSEC VPN over the internet. Each site has a PAN device. We are looking to add an MPLS network to act as the primary route between each ...

Delete inherited zones

Hello, I'm creating locally a lot of new zones on a 3020 firewall, but committing it says the hardware limit is 40.Currently I inherit 9 zones from a Global Template from Panorama, but I don't need that zones.I cannot modify the Global Template. There's a way I can simply delete the zones from the local firewall?If I select a zone, the delete bu...

Application match... Sophos-live-protection to 8.8.8.8

Our logs show a numebr of connections from our DC's to port "53" application sophos-live-protection... That's fair enough, I understand the concept of what sophos are tryign to do with this. What I don't understand is why the destination is 8.8.8.8 and not one of the sophos listening addresses... I don't suppose anyone sees this? Rob

Resolved! Create VPN Profile or Group for a vendor to access specific internal server

Hello all, We snagged a PA820 to replace an old ASA 5510. I think I have everything set and I am almost ready to cut over to the new PA firewall, with one exception: I am drawing a blank on the best way to setup VPN access for a support vendor. With our current Cisco solution, the vendor starts up Cisco AnyConnect, and selects a group from a dr...

colesch by • L2 Linker
  • 11244 Views
  • 8 replies
  • 0 Likes

mgmtsrvr - virtual memory limit exceeded, restarting

Has anyone seen this before? I'm looking for feedback on whether or not this is directly related to the VM Panorama sits on? This was the decription of an alert I received at 12:30EST today. Sure enough, Pano was rebooting. Any information provided is greatly appreciated!Thanks,Erich

ejm by • Not applicable
  • 9219 Views
  • 4 replies
  • 0 Likes

Resolved! Dynamic Destination Routing

Hello All,i have a senarion in which a user vlan routed to internet link1 thorugh policy baseed routing now i have a one destination which has dymaic IPs and only can open with internet link 2 i want this destinatioon to be opend for the user vlan, how can i achieve this?

FShabbir by • L1 Bithead
  • 4395 Views
  • 5 replies
  • 0 Likes

Email attachment

Hi EveryOne How i can block the email attachment (RAR ,EXE) file What the proper way to check to fake email are incoming in a local network

MFayez by • L2 Linker
  • 2035 Views
  • 1 replies
  • 0 Likes

Resolved! unknown-tcp when tls decryption is enabled

I have a VM-100 in my lab. I haven't used it in while but recently booted it up and upgraded to 8.0.12. I noticed a lot of unknown-tcp traffic for mostly any site when I enabled tls decryption. If i disabled tls decryption, the traffic is all ssl. I have never seen this before. I'm running it on esxi 5.5

ce1028 by • L4 Transporter
  • 3448 Views
  • 2 replies
  • 0 Likes

Failed to install licenses. Model incompatible: feature model is VM300 while the device model is PRA

Hello all, I have just setup a Palo Alto firewall virtual instance. I have the interfaces setup now so that I can download updates/content. I attempted to apply my license using the authorization code. The first time that I tried I got an error that I needed a minimum of 6.5 GB of memory, so I shutdown the VM and changed it to 4vCPU and 8GB...

PFerris by • L1 Bithead
  • 18072 Views
  • 8 replies
  • 1 Likes
  • 24357 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks