General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 574 Views
  • 0 replies
  • 2 Likes

Palo Alto not loading certain valid sites, why?

Having another issue with these things (ready to throw them out the window in all honesty). 

 

Seems as though a couple sites simply won't load when routed through a pair of HA-3020s.  Of course Palo Alto support does a packet capture and sees no drops

...

drewdown by L4 Transporter
  • 7221 Views
  • 12 replies
  • 0 Likes

Resolved! Are Application Filters in Groups an AND or an OR?

Hi all,

 

If there are multiple application filters in an application group, do they work with AND or OR logic?

 

For instance, someone configured an application group which contains five filters.  All of the filters have "Subcategory = file-sharing."  T

...

HA Active/active vwire different location

Dear All,

 

We want to deploy 2 firewall PAN in 2 different location (Building) but same area/complex. Is there any ideal distance for HA link for both firewall? Is it need to directly or i can use via switch?

 

Can i deploy this topology? is there any s

...

topology.png

Resolved! Traffic showing from wrong zone

Hello all, I have a (hopefully) simple problem I can't seem to figure out.

I have recently created a new DMZ zone on my PA for guest users, but when a guest tries to access the internet, the traffic is showing as sourcing from the trust zone instead o

...

Resolved! Windows and User-Mappings

I have a user group in Active Directory where we place users who should not reach the internet. This user group is then tied to a Palo Alto rule to Deny access.

I've noticed (Windows PC) this week, that if a user who is in the Deny group logs in to a

...

Response Page: GlobalProtect Portal Login Page

greetings!

 

up until panos 8.0.7, i could reference logos and background pictures for my custom portal login page on secondary https servers. the web client would load them and display them.

 

now with panos 8.0.8, these externally hosted pictures do no

...

Resolved! Captive Portal is not presented for wireless users

Hello All,

 

PA3020

PAN-OS 7.1.4-h2

 

Having a strange issue with Captive Portal on PA3020  where the captive portal just suddenly has stopped working. Did a management server restart, tested with the PC directly connected into the Guest-VLAN over the wir

...

CP1.PNG
CP2.PNG
CP3.PNG
CP4.PNG

Global protect portal redirect to https

Hi,

 

We have a Palo alto in which if you try to access to the global protect portal using http, its automactically redirected to https.

For example: if we access to http://vpn.xxx.com , the browser redirects to https://vpn.xxx.com. So thats perfect.

 

Bu

...

BigPalo by L4 Transporter
  • 4947 Views
  • 4 replies
  • 0 Likes

External Dynamic List exceptions

Hello,

 

We have recently upgraded our FW to PanOS 8.x (currently running 8.0.8) and we want to use the newly added feature that enable to add exceptions in External Dynamic List.

 

However it doesn't seem to work since the configured IP we put in except

...

GlobalProtect internal gateways

I'm struggling with GlobalProtect and always on.I have it configuerd for Multi-gateways and that part works great.  My issue is when I switch WiFi networks to internal, the globalprotect still tries to connect. I have added internal host detection an

...

Amory by L1 Bithead
  • 3719 Views
  • 5 replies
  • 0 Likes

Running config not synchronized - Sync to peer

Hello ! 

 

We encounter a problem on a power supply on one of our Palo Alto. Since power supply replacement, we've the message "Running config not synchronized  - Sync to peer" but i've one question : Is the active firewall configuration will be pushed

...

Passive firewall initiating syslog connection

We've syslog configured on devices with tcp protocol on port 515. Our passive device syslog connection is breaking every 300 seconds. Can you help in understand why passive palo alto not sending keep-alive?

amey_13 by L1 Bithead
  • 3870 Views
  • 5 replies
  • 0 Likes
  • 23756 Posts
  • 110 Subscriptions
Top Solution Authors
Top Liked Authors
Labels