General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4121 Views
  • 0 replies
  • 0 Likes

Resolved! Panorama - Traffic Logs not showing up on Monitoring Tab

Hello All, Device type : PA M-500Software version : 8.0.10 I'm having an issue with old traffic logs not showing up on the monitor tab.Detailed Logs retention period is 33days GUI & CLI. but i can see only 22days log and after July 18 in monitor tabi can find this with 'show log-collector-es-indices' where can i see other 11days log?Thank you.

20180807_110434.png
20180807_110631.png
20180807_110747.png
hbshin by L2 Linker
  • 9305 Views
  • 2 replies
  • 1 Likes

Decrypt error (soap)

Hi, We realised that we are receiving decrypt errors accessing to O365 from inside to outside. We are doing decrypt in sessions. But we dont know why the sessions are finished with "decrypt-error". Any idea?

error.JPG
BigPalo by L4 Transporter
  • 5141 Views
  • 4 replies
  • 0 Likes

PAN Version recommended

Hello,This is Paul Castro from ITstrap Mexico, i would like to know if there are a KB or documents to know wich are the recommended Operating System to install in different model devices.For example:PAN 200 install 4.1.6 PAN version "recommended"PAN 500 install 4.1.4 PAN version "recoomended"Thank you.Paul Castro

itstrap by Not applicable
  • 8189 Views
  • 7 replies
  • 0 Likes

Speed Issue due to QoS

Hello, I am experiencing speed issues that I believe may be related to the current QoS configuration on my PA-3020 firewall. I currently have 2 different QoS classes defined: Class 1 & 2. I have three applications under class 1, and one application under class 2. However, under the QoS profile assigned to my outbound internet links, I have a...

Farzana by L4 Transporter
  • 4961 Views
  • 3 replies
  • 0 Likes

Resolved! URL Object FQDN settings

Hi, i must set the firewall to connect to this webpage www.google.com/recaptcha/api/siteverifyI have a object -> adress groups -> own address group for some other adresses (like itunes.apple.com and so on. There I musst now inser this domainwww.google.com/recaptcha/api/siteverifyBut i Can set this as a FQDN like the others because "The val...

user id not identifying user correctly

Hi All,In the middle of a domain migration and users that have been migrated are not being identified correctly. The user that is logged into the new domain gets a blocked message but on the blocked message where it displays the username it shows their old domain \ username. (username being correct and the domain being the old one).I have the us...

Web-browsing application being identified instead of SSL on port 443.

We just noticed that in our traffic logs there is traffic with the web-browsing application identified with a destination port of 443. The rule it is hitting on is only a port based rule with 80 and 443 as dest ports. My question is why would the traffic match the signature of web-browsing since the standard port in the App is 80? Is it because...

Panorama Query Builder

Hello, We are an organization with thousends of users. Our user names have prefixes stranding for their departement or unit, for example tic_username for IT, mkt_username for marketing and so on. I would like to generate custom report using Panorama Query builder but I'm unable to achieve this. I have tried to use source user filters ("source us...

Resolved! ospf route tie breaker in PA

Hi all, I am trying to make sense of tie breaker in case of equal cost ospf routes on palo alto ( all the route below have the same metric and all of the same type). Note ECMP is not use so only one route is choosen for routing. Couldn't find on the rfc what would be the tie breaker on such case and on some forum some people refer to the lowest ...

KarimSN by L1 Bithead
  • 5186 Views
  • 4 replies
  • 0 Likes

Resolved! Traps client - uninstall password

Hi all, We are currently testing Traps and during client installation, one of my colleague configured a wrong IP for ESM serveur. Traps client is installed but as it is unable to reach server, uninstall password in not set. Does anybody know how I can unistall Traps client on laptop or change ESM server IP ? What is the "default" uninstall p...

VinceM by L5 Sessionator
  • 19168 Views
  • 8 replies
  • 0 Likes

Resolved! Unexpected behaviour URl filtering web

Hi, We are having a unexpected behaviour with PA identifying a web: "rose.pharmaintelligence.informa.com"This web is categorize like "news". We have in our URL profile "continue". But we are seeing that this web is being denied with reason "policy deny". Why PA is not allowing this web?

URL.JPG
url news.JPG
traffic.JPG
BigPalo by L4 Transporter
  • 6480 Views
  • 10 replies
  • 0 Likes

Resolved! Bulk import applications into application group

Hi Lazy request here... Im trying to create application groups which will have a lot of applications in them and i wonder is there a way of easily importing a load of apps into a group, rather than typing it in one by one? I have exported the logs so i have the correct name of every app i just want to know if can then add all these app into one ...

CRDF18 by L2 Linker
  • 6837 Views
  • 6 replies
  • 0 Likes

Global Protect Client software version

Hi all, We upgraded client vpn 3.1.4 to 4.1.2. We are having 200 end users. I just need to check how many users accessing new Version. because still old version also available. How many of using Globalprotect version 3.1.4 ?How many of using Globalprotect version 4.1.2 ? Thanks,Lakshitha.

  • 24336 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels