This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

SSL Decryption Exclude List - correct syntax?

What is the correct syntax to exclude a whole domain, including subdomains and pages from SSL decryption? Say exclude all URL's from "test.com", would this suffice: *.work.com or would i need to include a list like: *.work.com*.work.com/**.www.work.com*.www.work.com/* Thought please 🙂

welly_59 by • L3 Networker
  • 2187 Views
  • 1 replies
  • 0 Likes

IPsec VPN throughput

configured site to site ipsec vpn between PA 820(head offc)XG firewall (branch offc)successfully. in the head offc we have 100 mbps download , 25 mbps upload speed and brach we have 100 mbps download and 50mbps upload speed. the vpn performance is very slow. what could be the reason???

GP pre-logon for IOS devices

Hello community, I was wondering if is possible to make Globalprotect for IOS or Android devices to work properly with connect methods other than on-demand, for example pre-logon. Did anyone accomplish this connection method?? Thanks and Regards,Marcos.

Carracido by • L4 Transporter
  • 2786 Views
  • 1 replies
  • 0 Likes

Name resolution takes too long, diskable name for report [report name]

Hi! We just finished deploying the PA-5260 running PAN-OS 8.0.10 at our edge. Everything works well so far, but we see the log message below in Monitory->Logs->System: Name resolution takes too long, diskable name for report [report name] The type is general and severity is informational, but we are also not passing a lot of traffic at the...

Palo Alto main and sub urls are different category

I have requested palo alto uel re categorzation team for re categorizing the main url of a site for ex: abc dot com.It has re categorized correctlly by Palo as requested. However I am getting blocks when I access abc dot com /subdomainWhen i try re categorize request for this subdomain, I am getting a reply from PA about the main domain is cate...

Best practice for Palo Alto Uplink

We are looking to deploy our new boxes (PA-3220) in HA in the next few weeks. We are trying to go with best practice methods. Currently, we have an Layer 2 ae interface that has multiple subinterfaces. Each subinterface is tagged with a Layer 3 SVI. The VLAN interfaces are IP'd and added to the Virtual Router. Example -Ethernet Tab:Interface ...

Global Protect DHCP config

With our firewall for VPN and DHCP all we configure is under GP gateway/agent/client settings we have an IPpool and address route. We need to add DHCP option 160 and I don't believe that it can be done on the Palo. We have never setup a DHCP relay over the Managegemt interface. Just checking to see if anyone has done this and if it is the wa...

Resolved! Register new management IP address of PA to Panorama

My PA is already connected to the Panorama.I had to change the Management IP address. The PA lost connection to the Panorama.The Panorama shows the PA with old IP and status Disconnected.Is there a way to update the IP of the PA on the Panorama, or for the PA to push its new IP to the Panorama? thanks Roger

Resolved! Traffic going through Management port

Hello All, We were setting up a PaloAlto Firewall and made all the basic configuration to make a test on the production environment, however when connecting to the production environment, we could see that all the traffic from the PaloAlto firewall was going through the management port and we have already defined the routes with the interface an...

Resolved! Decryption Broker License

I can't activate the Decryption Broker License in the support portal. There is only the Decryption Port Mirror License available. Is there anything to do before? Or is there an additional subscription for this?

hermey by • L1 Bithead
  • 3182 Views
  • 2 replies
  • 0 Likes

Panorama & "Managed Devices" unable to connect

I believe I have set up the Panorama and Firewalls correctly as per a few different KB articles I've read. I've check connectivity between the MGT interfaces, made sure that the attempts weren't being denied due to the fact that "permitted IP's" were configured. I even checked out a TCP dump of the connection on TCP 3978, and see ack's going out...

aayoung by • L1 Bithead
  • 3217 Views
  • 2 replies
  • 0 Likes

Resolved! Getting "__str__ returned non-string (TypeError)" for a minemeld.ft.http.HttpFT class of prototype

Hi guys, I'm dealing with a issue new to me, but perhaps somebody else has already resolved it. I built a new local IPv4 prototype based on the malwaredomainlist.ip. The configuration is: age_out: default: null sudden_death: trueattributes: confidence: 95 share_level: green type: IPv4interval: 300indicator: regex: ([0-9]{1,3}\.[0-9]{1,3}\....

Support PC which is connected via global protect.

When user is connected via global protect. How can destop support person connect to user pc who is logged in via global protect. I tried with desktop connected to global protect and then trying to access user pc who is also connected via global protect. Since users connected via global protect are in VPN zone. Allowing VPN intrazone traffic does...

  • 24415 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks