General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

LDAP interval

Hi,

I have a question in reference to the LDAP interval time. Specifically what my goal is I want to be able to let the firewall know about my AD group membership changes quicker. For example if I have a specific AD group that is configured on the fw

...

Resolved! URL domain reports

Hello,

I'd like to produce URL reports. I noticed that you can get report on the comlete URL but not based on the URL domain.

i.e i get entry for www.pippo.com/cpp/layout.css and another entry for www.pippo.com/img/pippo.jpg and for report purpose is o

...

Resolved! Meaning of different Interface states

I have scourred everywhere......

What are the differences between the interface states? I can't find anything anywhere!!

ukn/ukn/down(power-down)

disabled/down

forced/ukn

forced/down

If there are others I have missed, I'd love to be enlightened.

Weirdest thing I have seen

Having a weird issue. I installed an 820. I have internet traffic being NAT'ed. My gateway is set to the Palo. My hops to the internet look like this

Windows Box ---> Palo 820 --> Cisco Pix --> Internet Provider

Pretty basic.. I have a rule in place

...

Bad certificate _ inbound ssl inspection

Hi All

we are using 3rd party singed certificate for inbound SSL inspection , once we imported the certificate it is not showing any error and commit is working fine . once we add the certificate to decryption policy it is showing error as bad certif

...

Resolved! URL Category and URL Profile in same Rule

We have a default URL Filtering Profile that we use for general use. The default URL Filtering Profile has a couple dozen URL Categories which are set to alert. I need to allow EXEs from only five of the URL categories. If I add the five URL Categ

...

GlobalProtect remote access - some pointers

Dear All,

I'm relatively new to Palo Alto firewalls and I am attempting to implement GlobalProtect to provide remote users with access to our internal network through the Palo Alto firewall and I am striggling to get even the most basic system workin

...

GlobalProtect Best Practices

I searched through previous threads to see what the best practices are for securing GlobalProtect but the only thread I saw was dated and didn't have too much information. Could anyone share what their best practice is with setting up GlobalProtect?

...

Resolved! LDAP not work if management interface IP address cannot reach Windows AD

Configuration as below

1. Mangement interface with IP 192.168.1.2 (non-PA device as gateway)

2. Windows AD with IP 172.16.1.2 (PA device layer3 interface as gateway)

3. Subnet 192.168.1.0/24 and 172.16.1.0/24 cannot reach each other

With correct LDAP c

...

Resolved! VPN not working

Hi,

we are configuring a VPn between Palo Alto and PFsense. The VPN is configured properly but its nos getting up. No phase 1 up. We have treid to change all values proposals and lifetime.

This is the log. We tried to change lifetime with no success.

...

Anti Phishing Continue Page does not redirect and shows certificate error

Hi All,

The customer has deployed Credential Detection feature. They are able to view logs of the same on the firewall.

They have the action as "Continue" for "Auction" URL category. On submission of credential Response page do not appear and " S

...

ACC displaying "No data to display"

Hi All,

I've been trying to troubleshoot an issue with a PA-5060 using PanOS 7.1.10. For whatever reason Application Command Center is not displaying any data. I've tried to check if any resources may have been hung but there doesn't appear to be any

...

Resolved! Understanding Virtual Wire

I am trying to wrap my head around virtual wire from a practical perspective. To me it sounds like an access list apllied between 2 interfaces (e.g Internet & Users). That sounds like a typical concept with firewalls but since security rules would

...

Resolved! New To PA- Differences between WebUI & Panorama

My company is about to deploy PA's in a few of our data centers as well as a single Panorama VM. I have a traditional ASA background & want to know some basic theory on how PA's are configured. I am enjoying the free training on the support site bu

...

Resolved! MineMeld install error bower install

Hi all,

I have installed successfully minemeld on a test Ubuntu 16.04.

I try to do the same now in production and get an error on bower install :

fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": ["bower", "install", "--allow-root"], "delta":

...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!