This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Best practice wise, which ports do we open on our AWS instance for our TRAPS ESM Server?

Best practice wise, which ports do we open on our AWS instance for our TRAPS ESM Server? We currently have SQL and HTTP opened with Security groups in AWS for our two offices. This of course doesnt allow users in the field to get TRAPS updates unless they are on the VPN. Trying to get ideas on what to open. Our concern is that if the server is r...

Custom Category block per default

Hi When I create a custom URL Category, it is automatically added to all URL profiles with action set to "none".Can I set this default action to "block" - that means, the new URL category will be automatically added to all URL profiles with action set to "block" ? Thanks and Regards,RJ

GlobalProtect - Authenticating using trusted domain credentials

My company has recently configured Active Directory/Windows Domain Trust between ourselves and another domain (we have recently merged as a company). Our users currently authenticate to GlobalProtect using LDAP linked to our domain controllers. Is it possible for me to have users from the other domain authenticate using their domain credentials ...

welly_59 by • L3 Networker
  • 3255 Views
  • 2 replies
  • 0 Likes

Forward Trust Certificate greyed out

HiI have an enterprised signed CA Certificate and also intermediate certificate. But when I install either of these, it shows that cert is valid but I cannot mark the check box for Forward Trust Certificate. It is greyed out. I can only add self signed cert as a forward trust cert. Any idea what am I missing? BR,Rahul

Global Protect IP assignments

Its seems with the 4.1.4 client then when a user connects and gets an IP address that the client remembers the IP. I have an issue where that has happened, but the user got it out of the wrong pool and I can't seem to find a way to get it released. Also can you use a DHCP server with Global Protect and have different IP blocks based on the conf...

gzygadlo by • L1 Bithead
  • 2246 Views
  • 1 replies
  • 0 Likes

Captive Portal on second firewall

Hi community Most of you know about the captive portal feature on paloalto firewalls, to get user-ids for not yet somehow authenticated users. All this is also well documented exept this situation: I was wondering if it is possible to configure the captive portal redirect host to an FQDN which points to an interface on another paloalto firewall....

Remo by • L7 Applicator
  • 1839 Views
  • 1 replies
  • 0 Likes

Mac OS High Sierra Virtual keyboard problem

I use Mac OS High Sierra 10.13.6 (17G65) and GlobalProtect version 4.1.2-11. I use an Apple Bluetooth wireless keyboard and track pad. I have a physical disability and use the virtual keyboard that comes with Mac OS High Sierra. GlobalProtect is perfectly happy to take text input from the Appe Bluetooth wireless keyboard. When I try to enter...

Resolved! Top Talker/Conversation in Paloalto 5220

Hello All - How to generate Top Talker report for a particular period. The Report should contain as below Source IP addressDestination IP addressBytesServices/TCP UDP Port numbers These are the minumum filed should be in the Report. Can you pleae help to know who to achieve this. Roughly i tried using ACC module, but i couldnt achieve. I get Top...

FTP Data Transfer very slow through Palo Alto

Dears I created Local ftp over Tls through Palo alto . I published this server and create both nat rule and security policy rule and i am connecting from internet using filezilla but the transfer rate is very slow 25KB/Sec . I have dedicated leased line 8 MB. I think that i can reach 1mB/Sec transfer rate . I disable Server response inspection a...

How to configure QoS with a limit per user

I am looking to configure our Palo Alto firewall to limit every user on our network (approx 5,000) to 10Mbs or less. I have a 1Gbit pipe. The documentation I have seen so far has shown how to do this for 1 person. How do I set it up so that 1 rule covers every person? Our users are spread across several vlan and IP ranges. Even if went through t...

ggranular sharepoint filtering

I am trying to implement granular url filtering within sharepoint site but firewall is considering it as a generic. Eg: https://xyz.sharepoint.com/pages/department/* is the url I want to allow and block rest of sharepoint. Whenever I try this link,Firewall is taking it as https://xyz.sharepoint.com/ I did test by enabling ssl decryption but of n...

  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks