This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Untrust to Untrust - Allow

I was working at a customer site and noticed the customer's last rule before their "Catch-All - Deny" rule was "Untrust - Untrust Allow". It was a universal rule with source zone untrust destination zone untrust set to allow. When I asked why they had this rule, the response was "By default, the firewall comes with a default intrazone allow r...

ce1028 by • L4 Transporter
  • 18584 Views
  • 11 replies
  • 0 Likes

Binding to AD with globalprotect

We have user accessing the globalprotect VPN using their AD account and we have userid enabled, but we do not see any evidence of the users in the AD domain controller, is that because GP is accessing the DC using a service account? Is there anyway to get the AD accounts to bind on the DC? We need these records for other things

jdprovine by • L4 Transporter
  • 7606 Views
  • 13 replies
  • 0 Likes

Dual ISP IPSEC vpn tunnel monitor drops the connection

Hi all, I added second ISP to firewall and created ECMP for dual ISP followed those guides: https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Implement-ECMP-Load-Balancing-on-the-Firewall/ta-p/110339# https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-a-Palo-Alto-Networks-Firewall-with-Dual-ISPs/ta-p/59...

SShnap by • L3 Networker
  • 4150 Views
  • 3 replies
  • 0 Likes

GRE support on PAN-OS 8.0

Hi,is it possible to terminate a GRE tunnel on a PaloAlto? Parhaps there is something new in 8.0 Best regrads,Sebastian

sst by • L0 Member
  • 5857 Views
  • 5 replies
  • 0 Likes

Resolved! Log forwarding - Local on Gateway or Panorama

Hello - I have Firewalls configured with Log Forwarding to Panorama. The question is, do the traffic logs of the Firewall Gateway keeps the copy of the logs and send another copy to Panorama or does it have only one copy forwarded to Panorama Can i configure to forward all the traffic logs of the Firewall to the Panorama and not to keep local co...

PA VM licensing issue between support accounts

Hi, Although looking through this in internal sources as well, but maybe you guys have seen this and have an idea. Initially there was PA VM-100 trial registered in Support Account 1 - partner account. Everything's good.Trial expired, full license was purchased - auth code was registered in Support Account 2 - customer specific account. VM-100 w...

nikoo by • L3 Networker
  • 6399 Views
  • 3 replies
  • 0 Likes

Web-Browsing default port application

Hey , i just wondered why in the era that all web traffic is moving forward beeing encrypted and browsers like chrome will soon mark websites that uses HTTP protocol as "unsage" paloalto "web-browsing" application still uses in it's default ports only tcp/80 port and not also tcp/443 port? thanks

minow by • L4 Transporter
  • 30634 Views
  • 5 replies
  • 0 Likes

Re:Minemeld Miner Config

Hi guys,How can we creat a prototype miner in the MInemeld hosted by autofocus, is there any tech document with regards to how to customize/config a prototype for Miner.Thanks

Sanssj by • L2 Linker
  • 3221 Views
  • 1 replies
  • 0 Likes

Resolved! Decryption servers same ip

Hi, We need to decrypt traffic (SSL Inbound Inspection) for a server which is running 3 URL. This server has 3 certificates, one per application. So we would like to decrypt traffic for this 3 applications but in decrypt policy we only configure using IP. The IP is the same. So is there any way to decrypt traffic for three URLs. Its possible to ...

BigPalo by • L4 Transporter
  • 2601 Views
  • 1 replies
  • 0 Likes

Resolved! Upgrading a stand alone PA-Firewall 3020 to a HA-Cluster

Hello everybody, is there any article or best practice document which discribes the configuration of a Palo Alto 3020 Firewall HA-Cluster active/passive while there is already a working stand alone PA 3020 Firewall. Is it the same way I configure a HA-Cluster out of the box? https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/high-av...

Mvdohe by • L1 Bithead
  • 6763 Views
  • 5 replies
  • 0 Likes

Resolved! Firewall Useraccounts/Passwords get overwritten by Panorama

Hi all,we have some 160 firewalls connected to a single panorama.One of our suppliers get read only accounts on the firewalls. The accounts including the password and profiles were created on panorama and then pushed as device settings to the firewalls. The supplier can change the local firewall password and login with a new password. However, i...

Resolved! User-ID Problem. LOGs show "machine-names" instead of "usernames"

Hello All, BOX 3020, with PANOS 8.0.9 with USER-ID problemsSome IPs are mapped to machine names... not anymore to users... admin@BRFW-3020-02(active)> show user ip-user-mapping all | match bres172.26.20.116 vsys1 UIA XXXXXXXX\bresd11192$ 42609 42609172.26.20.68 vsys1 UIA XXXXXXXX\bressd14056$ 43167 43167172.26.52.36 vsys1 UIA XXXXXXXX\bresd1...

ScreenShot103.jpg

Re: Vwire and L3 Deployment Decryption

Hi,I would like to know the way it operates in the backend how palo alto does the SSL decryption in Vwire mode . As in a L3 deployment the connection will terminate on the firewall and firewall acts like a MITM and does the SSL Proxying. How is the case in Vwire Deployment.Thanks

Sanssj by • L2 Linker
  • 2278 Views
  • 1 replies
  • 0 Likes
  • 24415 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks