This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4473 Views
  • 0 replies
  • 0 Likes

Resolved! LACP NEGOTIATION LOG FILE

Hello, In order to debug an issue in our LACP interfaces.I need to run lacp debug and to find the log file of lacp negotiation. And there is a log file of all ethernet negoatiation? Thanks in advance.

Resolved! ISP redundancy and route load balancing.

Hi, Community! I'm looking for some help with a customer today 🙂 Here's the situation: a customer has a dual ISP configuration and wants the traffic both to be balanced between the routes of the two providers and that a redundancy scheme is put in place, so that in the case one ISP fails, users can go out to the internet through the other one....

CMachado by • L2 Linker
  • 11857 Views
  • 8 replies
  • 0 Likes

PA-220 Not Decrypting any HTTPS Traffic even after I have followed ALL the Palo Alto Live Videos

For some reason SSL Decryption is not working on my PA-220 - I have followed many many many of the palo alto instructions to try to get it to work but some how it is still not working - the PA-220 is simply not decrypting any of the Https Traffic. I cannot even decrypt a single https traffic for some reason. I have installed the Certificate that...

Resolved! Replace passive member in HA (A/P)

Hi, We need to replace the passive member in a cluster. So in the HA preempt is not enabled. And priority in the active member is 100. So i understand that we can directly connect all the cables for new devices and this new member will take passive role since there isnt preempt enable, right???should i connect first of all HA cables in order to ...

BigPalo by • L4 Transporter
  • 2944 Views
  • 1 replies
  • 0 Likes

Stuck in Failsafe Bootloader. what now?

My PA-820 is stuck in failsafe bootloader mode. what are my options now? I am no longer getting the option for MAINT mode either. If I let the system boot on it's own I get the below and it just keeps rebooting. Welcome to the PanOS Failsafe Bootloader.U-Boot 8.0.6.0-29 (Build time: Oct 13 2017 - 12:13:40)Octeon unique ID: 044000214719f31e0...

GPL-DDay by • L0 Member
  • 9202 Views
  • 4 replies
  • 0 Likes

Resolved! No source user in logs post 8.1.2 upgrade

At the weekend I upgraded all our boxes from 8.0.9 to 8.1.2 as we need to make use of the new GP - Split Tunnel by URL features & Enhanced UserId coolness. Yes, I know - this was brave 🙂 Everything seems to be working as expected & as it was pre-upgrade with the exception of logging, where we no longer get the SourceUser in the logs for...

SimmSimm by • L2 Linker
  • 4045 Views
  • 2 replies
  • 0 Likes

Asymmetric routing with the same interface

I have to deploy the WAN firewall which have 2 WAN link. The requirement was egress traffic from the firewall to WAN will be send to Link A but the response traffic will be ingress from the Link B. If I've set both of these interface in the same zone, untrust zone, does the firewall will be dropped because of asymmetric routing?? Or firewall wii...

Site to site VPN help :(

Unable to make VPN work. Both "IKE Info" and "Tunnel Info" are red light in IPSec Tunnel.The peer is a Juniper vSRX.Normal configuration with trust, untrust and VPN zone in both firewall. Each zone has its own subnet.Both firewall can ping each other untrust interface.Workstations behind the firewalls can ping firewall's untrust interface too (d...

jeremylo by • L3 Networker
  • 8325 Views
  • 5 replies
  • 0 Likes

VM-Series firewall on VirtualBox

Hi,I know that VM-Series firewall requires VMware ESXi running vSphere 4.1 or 5.0.But I don't have VMware right now on my laptop and only I have is Oracle VirtualBox 4.2.6 - just for tests and presentations (not for commercial purpose)On VirtualBox I've already imported vmdk file but when I launch PA-VM I see: 'Welcome to the PanOS Bootloader. ...

Clientless VPN

Hi All, can someone provide configuration example for Clientless VPN access through GP portal...I was already used configuration steps explained on this page, but seem that it not helped in my case. I'm able to authenticate and open portal landing page with published app, but there is no response of it. I'm pretty sure that all steps of configur...

Tician by • L3 Networker
  • 6672 Views
  • 5 replies
  • 1 Likes

Dynamic Routing on MPLS network with IPSEC VPN as backup route

We are new to the Palo Alto community and are looking for some advice as the best way to accomplish our networking end-goal. We have several remote offices that are currently connected to corporate using an IPSEC VPN over the internet. Each site has a PAN device. We are looking to add an MPLS network to act as the primary route between each ...

Delete inherited zones

Hello, I'm creating locally a lot of new zones on a 3020 firewall, but committing it says the hardware limit is 40.Currently I inherit 9 zones from a Global Template from Panorama, but I don't need that zones.I cannot modify the Global Template. There's a way I can simply delete the zones from the local firewall?If I select a zone, the delete bu...

Application match... Sophos-live-protection to 8.8.8.8

Our logs show a numebr of connections from our DC's to port "53" application sophos-live-protection... That's fair enough, I understand the concept of what sophos are tryign to do with this. What I don't understand is why the destination is 8.8.8.8 and not one of the sophos listening addresses... I don't suppose anyone sees this? Rob

  • 24380 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks