This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

IPs and ports allowed to a specific host destination

Hello everyone! I was wondering if anyone had any tips or knew of any free tools that I could use to easily gather the allowed IPs and ports for a specific destination IP.We have a user that would like ot know what traffic is allowed to a specific group of servers. I'm just trying to avoid manually going through the all policies...I'm new to thi...

Cannot ping server but monitor sees the ping traffic as allow

My Palo Alto PA200 e1/1 (10.10.10.1/30) is connected to router A and e1/2 (10.10.20.2/30) is connected to router B.The server 192.168.1.100/24 is behind router A (10.10.10.2) which has a static router to destination 172.16.1.0/24 with next hop 10.10.10.1.The user 172.16.1.100/24 is behind router B (10.10.20.1) which has a static router to destin...

jac101 by • L2 Linker
  • 2677 Views
  • 1 replies
  • 0 Likes

New Feature request or ?

Hi I would like to have apolicy that just logs and does nothing else - ie the packet keeps getting evaluated. some times I want to know there is packet there but not process it with that line. Can this be done already ?

Azure Site Recovery Miner - XML source into Minemeld

I'm looking to do, what I believe, would be a simple minor for Azure Site Recovery IP list. The list is located here and is in XML form. https://aka.ms/site-recovery-public-ips I have bounced around on some articles and tried to follow a few, but came up empty-handed. The Node I have setup says it was successful, but with 0 indicators. Is...

Jmarx1 by • L1 Bithead
  • 4252 Views
  • 1 replies
  • 0 Likes

Resolved! Moving Colo Datacenter

Hi folks, We got some dreaded news that our colo vendor is not renewing lease and we are now moving.We have two 3020 firewalls configured in HA. I am looking for any general comments that could help in my direction. One thought:Break HA.Take secondary firewall over to new colo datacenter.Edit secondary firewall configuration for new IPs.Make sec...

OMatlock by • L4 Transporter
  • 7038 Views
  • 7 replies
  • 1 Likes

Palo Alto against spam

helloİn the network users get many spams.We dont have any other anti-spam solution.Is it possible to stop spams by Palo Alto NGFW?

Radmin_85 by • L4 Transporter
  • 11348 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect Migration Assistance

Hello! So, we inheritted an infrastructure with a few hundred VPN users whose Global Protect clients were all deployed pointing to the IP address of the GP Portal (not an FQDN). And, of course, we are now in a position where that physical site (and its IPSpace) are going away... We've stood up a new GP portal and gateway at a new location (wit...

locampo by • L2 Linker
  • 9937 Views
  • 6 replies
  • 0 Likes

Global Protect ( Force Password, Use GoogleAuth, Client required file?)

Just stating to trial GP.... And have 3 questions. 1) I can't work out what option I need to tick to force the user to re-enter their password on connect ( Android Client in this instance. 2) Can Google Auth Be used for 2FA? I can't find a guide? 3) Can I specify a resource that must be on the device ( a file for example ) as aditional requireme...

Aruba AP Tunnel Problem

Hello, I'm having problems with Aruba AP connection through a FW. I got my APs in the inside zone, and the controller is in a DMZ. Previously I had a security rule that allowed aruba-papi and syslog app and the AP connected to the controller without any problems. But After I updated the firewall to 7.1 (now 7.1.19) the rule has not been working ...

gmunoz by • L1 Bithead
  • 9564 Views
  • 3 replies
  • 0 Likes

Youtube working from - youtube application in phone

Hi Team as per the requirement youtube needs to be blocked , we have blocked youtube with applcation , url category and it is blocked on browser. but when customer accessing the youtube application it is not getting block even though it is hitting the deny policy . we have tried decrytion as well but no luck . Any suggestions ?

Rameshwar by • L3 Networker
  • 2486 Views
  • 1 replies
  • 0 Likes

inbound ssl decrypt and iphone

Hi Seems like I am having issues with iphones and inbound ssl decrypt with 8.0.12 any one else having this issue. seems like 0-200k of data is okay, after that ... dies in the arseA

Trigger/logs DoS policy

Hello, We would like to be notified when there is a high number of requests to our servers, and even to control them in time. Aside to be able to see an event in the logs (as it is the case with the flood in the sessions) The configuration we are looking for does not require (and should not) limit the number of concurrent connections. We should...

BigPalo by • L4 Transporter
  • 3679 Views
  • 2 replies
  • 0 Likes

Can't Update License from License Server

I recently bought a used PA-200 off ebay just to play with and learn on. It's been factory reset and has no licenses loaded. I am unable update the license from the license server. I do not have a support contract. I suspect I'm just hosed, but wanted to ask just in case whether I have any options.

Resolved! GlobalProtect with Certificate Profle

I have configured GlobalProtect to use Authentication Profile using LDAP (sAMAccountName) and a Certificate profile. I have user certificates pushed through Group Policy. The configuration works. However, I noticed a few things 1) If I login as UserA and delete the certificate from UserA's personal store, VPN will not connect (this is expected...

ce1028 by • L4 Transporter
  • 7531 Views
  • 5 replies
  • 0 Likes

Resolved! Received conflicting ARP on interface ethernet

Hi all, after exporting the old config from my old pa500 to the 820, I had an old interface that was for my wifi vlan, that used to be a physical int on the 500 but I needed to remove it since now the 820 only has 4 ethernet ports, I reset it as a sub-int on the 820, but now I'm getting this message "Received conflicting ARP on interface ethern...

cdcirexx by • L3 Networker
  • 19534 Views
  • 7 replies
  • 0 Likes
  • 24446 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks