This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Site / urls you don't want to decrypt

Hi I have a set of decrypt rules 1 to no decrypt based on src addressor dst addressor url - the usl is from custom objects / url category where I add in url's lile *.lync.com then i do my decrypt line so the above gets hit first and then the decrypt I also notice there is device / cert management / ssl decrypt exclusion << which seems to b...

ssl decryption and temp cert management

Hi I ran into an issue with the decryption cert being provide by my PA it had expired. it was 30 days in. I believe this is an issue with the date time comparision and timezones as it has fixed itself today. How do i find / look at these temp certs via the clihow can i delete / renew or purge them from the cli A

Dynamic update error " Failed to upload image..."

While trying to push dynamic updates from Panorama to managed devices it is failing for some of the devices(PA-200)It gives an error " Failed to load image.."We have checked the licenses of the devices for which dynamic updates are failing and found that it is valid.Also the PANOS version of Panorama is 6.0.4 and the managed devices PANOS versio...

tac.in by • L3 Networker
  • 7274 Views
  • 3 replies
  • 0 Likes

Rest API for CPU utilization

Hello, I'm trying to create a Rest API URL to check the CPU utilization on my management and data planes and create a report to monitor over time. Using commands like show running resource-monitor did not give me exactly what I was looking for. I used the <firewall ip>/debug and got the following XML: <response status="success"><...

ha sync issues

I am have trouble with intermittent synch failures between my primary and passive firewalls. I am currently at OS7.1.16 and TAC told me that to fix my sync issues I need to upgrade to 8, Any thoughts on this

jdprovine by • L4 Transporter
  • 6622 Views
  • 11 replies
  • 0 Likes

Resolved! Vsys + Failover config (Urgent!)

Hi,I am very new to PaloAlto and currently trying to figure out the following: 1. is HA or Failover VSYS specific? 2. if so, how do I find failover/HA config per vsys?3. How do I setup failover/HA per vsys? the appliance i am using is PA-3020 software version 7.x. I will really appreciate your help with this. Kind regards,Ali

qasim02 by • L2 Linker
  • 7941 Views
  • 7 replies
  • 0 Likes

Troubleshooting GlobalProtect client postvpnconnectcommand

Hello Community, for a customer we are trying to install the GlobalProtect client on 100 laptops. this works great the laptops connect to the netwerk using the globalprotect client. the problem we have that the postvpnconnectcommand is not running the command we want it to. it should be running an drivemapping batch file so users are able to acc...

Panorama zero window size

Hi, we have an HA pair of M-100 Panoramas which were running fine until we attempted to upgrade the memory to 32GB to be able to run version 8.1.3. The passive Panorama went fine but the active would not boot after the memory was upped so a replacement was sent. The box was swapped and config applied then memory installed and upgraded to 8.1.3.F...

Martfalc by • L0 Member
  • 4372 Views
  • 2 replies
  • 0 Likes

tcp out of order

I am trying to diagnose why I am unable to access some server via ssh and the VPN. I have done a packet trace and the results were concerning tcp out of order and retransmission. So what is the best way to find out why?

jdprovine by • L4 Transporter
  • 17245 Views
  • 7 replies
  • 0 Likes

WildFire file size limits

I'm trying to figure out whether our file size limits for WildFire are set appropriately. I have been unable to find a good way to determine whether there are files that aren't being uploaded due to their size. Would that show up in our logs? I've also discovered the WildFire logs don't include a column for file size, I need to look at the detai...

Resolved! Get vulnerability description and signature

How do I get the signature on what a Vulnerability has triggered?I can only see the Threat Name and its ID in Panorama and look up the ID in the Customer Portal.But there does not stand what combination or findings actually lead to this attack. Where can I get this information? Thanks in advance.

Missing IP's in Minemeld feed

We pull Zeus IP's using minemeld. Statics page shows the current number of IP' 109, which is the same as hosted on this URL. https://zeustracker.abuse.ch/blocklist.php?download=ipblocklist Every few months i got notified to comunication with one of theses IP's and when i check the zeustracker.abuse.ch shows the IP in the list but the output is ...

image.png
image.png
raji_toor by • L4 Transporter
  • 5623 Views
  • 2 replies
  • 0 Likes

Not seeing a customized prototype in GUI

Hello team! I hope you are doing alright. Currently, I am trying to add a customized miner prototype and while creating it in the /opt/minemeld/local/prototypes/ folder, I am not able to see in added in the GUI. What could be the problem here? Thanks in advance! Best regards, Petar

  • 24432 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks