This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

How to configure QoS with a limit per user

I am looking to configure our Palo Alto firewall to limit every user on our network (approx 5,000) to 10Mbs or less. I have a 1Gbit pipe. The documentation I have seen so far has shown how to do this for 1 person. How do I set it up so that 1 rule covers every person? Our users are spread across several vlan and IP ranges. Even if went through t...

ggranular sharepoint filtering

I am trying to implement granular url filtering within sharepoint site but firewall is considering it as a generic. Eg: https://xyz.sharepoint.com/pages/department/* is the url I want to allow and block rest of sharepoint. Whenever I try this link,Firewall is taking it as https://xyz.sharepoint.com/ I did test by enabling ssl decryption but of n...

DMZ with multiple VLANs, multiple Zones?

If you have a DMZ behind the Palo and it contains multiple VLANs or sub-interfaces, would you create multiple Zones(one for each VLAN)? Or create a single "DMZ" zone and apply that to all of the VLANs?

jambulo by • L4 Transporter
  • 5726 Views
  • 4 replies
  • 0 Likes

Disk quotas can not be computed due to disk

Hello Team,We have seen in the PA 5200 series that the following log appears: "Disk quotas can not be computed due to disk" It appears just after the boot in the system logs. Have you ever seen this log? What it means? Is dangerous for the firewall?PANOS 8.0.10

ccoquis by • L0 Member
  • 3767 Views
  • 3 replies
  • 0 Likes

Resolved! Upgrade PAN500 from 7.0.2 to 8.0

HI All I am wanting to upgrade the PAN 500 currently on 7.0.2 to 8.0 Is there a good read what major release version I have to follow to do the step upgrade? What major release i have to follow if anyone can guide me. Regards

R_Sharma by • L2 Linker
  • 5931 Views
  • 6 replies
  • 0 Likes

Resolved! Blank GUI Logs

Hello,I'm running Minemeld 0.9.46 on RHEL 7.4 installed via Ansible. Everything appears to be working correctly except I'm not seeing any logs in the Logs tab or the logs page of each individual node. I am getting updated statistics for each for each node (Add/Updates/Withdraws). And the dashboard is populated with dynamic data. When I navigat...

jt1025 by • L2 Linker
  • 3618 Views
  • 1 replies
  • 0 Likes

Resolved! Blocking Access for a User in a Specific AD Group

So I'm looking for the best way to block a user in a specific AD group but get them a response page while I do it. These users are going to be students who violated network policy and are being blocked to everything except some of the educational/homework sites we run. Initially I thought of just doing two security policies... a permit with FQD...

jsalmans by • L4 Transporter
  • 9186 Views
  • 10 replies
  • 0 Likes

Resolved! DHCP lease assignment order

While configuring the PAN firewall as a DHCP server, is it possible to assign lease to a client starting from the highest to the lowest range? Meaning if the DHCP range for the subnet 10.10.10.0/24, is from (10.10.10.100-10.10.10.254), can the lease be given in the order of 10.10.10.254 1st, 10.10.10.253 2nd, 10.10.20.252 3rd and so on until 10....

Birajan by • L1 Bithead
  • 2877 Views
  • 2 replies
  • 0 Likes

ACC - session number meaning

Hi, Does anyone know what exactly session number indicates under ACC? For example, we have a specific appwhich has constantly around 250K sessions on the firewall. However when I click ACC and set time as "last 15 minutes"for this specific APP, I see 20-21k sessions for the last 15 minutes which doesn't make sense. I wonder how I can see the s...

Resolved! SSL Decryption & URL Filtering License

Hi All,To enable SSL Decryption and to make use of URL categories to allow or block traffic based on the URL categoy , does URL filreting license is required or SSL Decryption can be used fully without URL filtering.RegardsSam

snasheet by • L0 Member
  • 6286 Views
  • 3 replies
  • 0 Likes

so TLS 1.3 got IETF branded

hey there, since tls 1.3 is now a ietf standard, is there any use running ssl-decryption in the close future?as far i understand 1.3 documents, it "looks like" 1.2 for the firewall, so there's no way to just block 1.3 and force both parties to downgrade to 1.2, or i'm wrong? any news/tech docs from pan about the 1.3 "issue"? so longo/

ADK999 by • L1 Bithead
  • 9341 Views
  • 6 replies
  • 0 Likes

Resolved! HA Active/Passive MAC address

Hello - In PaloAlto 5220 appliance configured in Active/Passive mode, both the Firewalls do have the same MAC address on interfaces. For example ETH 1/1 of active and standby Firewall have the same MAC address after cluster/HA was created. These the switchport connecting the StandbyFirewall doesnt learn the MAC address of the Paloalto interface....

Redirect Users to GPCS Portal for Agent Download

I am trying to figure out a way to automatically get users to my GPCS portal so they can download agent. I have tried setting up the captive portal but that doesnt seem to do more than authenticate my users so i have user-ID info. Would there be a way to do this with URL Filtering or some other mechanism? Use-Case: User is attempting to visit...

PA200 not enought network port

Hello everyoneI have a PA200 which has only 4 network ports. But now I have 2 direct internet connections and 2 4g connections and 1 is uplink to my network. Would it be possible to connect a port of the pa200 not directly to the router but to a small 8port switch to which my two routers are connected? These have the IP 192.168.5.1/24 and 192.16...

  • 24401 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks