This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

policy block website because of application deafult

Dears There is policy on my firewall ,we set the service as "Application-Default" not "Any" . the problem is that when user access to specefic website ,the connection be dropped because the service is "Application-Default" although the destination port is 443 when i change "Application-Default" to "Any" ,website be opened without problem ?! I w...

Resolved! Panorama - Templates

I'm trying to figure out what the best practice and recommended method is for templates inside of Panorama? I've heard some conflicting info. Some advice says if I'm managing say 20 firewalls in Panorama, I should have a template for each firewall. I've also heard the opposite, that you only need 1 template for all firewalls. I've also heard ...

ce1028 by • L4 Transporter
  • 4994 Views
  • 4 replies
  • 0 Likes

Resolved! Commit Warning: Profile compiler : app http2 not found (Module: device)

Getting this warning on several PA-820's running v8.1.2 and v8.0.9."Commit Warning: Profile compiler : app http2 not found (Module: device)" I'm not using anything called "http2" so not sure why this is popping up all of a sudden.I'm ignoring, but just wanted to post it here in case anyone else is seeing it? Commit Warning

1-Commit- app http2 not found.PNG

SNMP Polling - IPSec Tunnel Status

I have downloaded the MIB's but cant find anything which would enable me to monitor the status of an IPSec tunnel. Is it possible to monitor IPSec tunnel Up/Down via SNMP?

welly_59 by • L3 Networker
  • 8240 Views
  • 5 replies
  • 0 Likes

Issues with service and applications in rules

Is or has anyone else had the problem with applications and services being ignored in rules? I have had an issue from all version from 7.0 to 8.1. I have stopped using applications in rules all together because it will not identify the application and instead mark it as "not-applicable". I have the problem with services as well. For example I wi...

Resolved! Multi-vsys mismatches with peer

Hello guys, I need to create additional virtual system on a 3020 cluster. Said that I have installed a regular multi-vsys license, I have enabled the multi-vsys capability (Device-Setup-General) on both devices.Now on both of them the HA state (active-passive) is SUSPENDED with the "multi-vsys mismatches with peer" error.But apart from enabling ...

Resolved! Palo Alto's Version on ASA Packet-Tracer Command

Coming from an ASA back ground I am trying to learn more about troubleshooting in the PA. From what I learned so far there is no command in the PA that tests the full path of communication similar to packet-capture in the ASA. When in CLI I see there is a test command that breaks out different components of the communication path. I can test ...

Resolved! Custom Report Syslog

Hi All, I have a client who asks me if it is possible to generate a report (for example, an annual report) where part of the records are stored in a Syslog.My question is, can the FW extract information from the Syslog to create a report?I appreciate your help.Regards

Resolved! Query on Panorama

Our panorama is in Legacy Mode with no additional disks.We are planning to do two things.• Adding another 2TB disk for logging • Change it from Legacy Mode to Panorama mode.I’d like to know the best order to follow. Can we add the disk first (which will also start moving the logs from the system disk to the new disk) and then change it to Panora...

Farzana by • L4 Transporter
  • 4168 Views
  • 3 replies
  • 0 Likes

captive portal from Pan-OS 8.0

Hello community, Does annyone know a manual step-by-step on how to configure captive portal with Pan-OS from 8.0 with authentication rules. the admin guide seems not to clear to me. I´d like to configure captive portal in redirect mode. Does anyone know a manual or you can point out in brief what elements do I need to make this config? Thanks in...

Carracido by • L4 Transporter
  • 2837 Views
  • 2 replies
  • 0 Likes

URL filtering https pages

I can’t seem to get this working. I’m trying to block bbc I player but neither url filtering or APP-ID does the job.Do I need to enable ssl inspection to block https pages?I have tried with httpvshttps.com for example and I can block the http version but not the https version

welly_59 by • L3 Networker
  • 4007 Views
  • 6 replies
  • 0 Likes

HA active/passive OSPF design

Hi, Following topology is from PAN's design guide for A/P OSPF setup.I wonder if it brings any benefit to connect firewall1 to Edge Router B andFirewall 2 to Edge Router A with additional cabling run OSPF there too. The only thing I can see is that there won't be a firewall failover but routing protocolwill re-route the traffic via RouterB i...

ospf_design.png
  • 24415 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks