General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Aggregate Interface Throughput limit - Multi VSYS - Shared Gateway.

Hi Community I have multiple VSYS setup that also uses Shared Gateway for collating access to my Data Centre to and from each VSYS. I have a PA5250 setup running OSPF with a 40G routed connection to my Data Cente (Northbound) - in the shared gateway area on a dedicated P2P 40G interface.. Each VSYS has a secure zone and an unsecure zone. The Uns...

mcnairi by L1 Bithead
  • 10082 Views
  • 9 replies
  • 0 Likes

Syslog - Collecting Internal DNS

Hey Everyone, I noticed my Syslog box isn't receiving internal DNS information from the Palo. I originally thought the URL log type would capture internal information (yes i'm aware what URL stands for, but I could hope). However that doesn't seem to be the case. Is there a particular field, log type, or severity level I can enable to collect ...

Agentless User-ID "Not Connected"

PAN-OS 8.0.9Server 2008-R2 I am in the process of investigating the setup of User-ID, utilising our test network which has a VM500 I am starting using the Agentless option. ( The production site has 500 users, mostly Citrix Terminal Sessions but also Some PC's so I guess I will also need the TS agent further down the line.) I have done the three...

IPSEC VPN issue

I have realy weired issue, I have two sites connected with IPSEC vpn, PAVM200 to PA3020. the sites are connected with IPSEC very stable vpn, remote site trying to access DMZ zone on the local site.The routing confiured and policy rule allowing the access from VPN to DMZ. everything works fine and I was able to see the traffic,suddenly after the...

SShnap by L3 Networker
  • 2891 Views
  • 2 replies
  • 0 Likes

timeout erors

hello.i tried importing a git file in my extensions, and mine is a proxy server.i get time out error.the git file is a taxii new mine.

lahiri by L1 Bithead
  • 2570 Views
  • 1 replies
  • 0 Likes

Resolved! How to fix "Unable to fetch external dynamic list. SSL connect error. Using old copy for refresh"

After upgrading from 8.0.6 to 8.0.10 our local EDL list stopped updating. The logs message states 'Unable to fetch external dynamic list. SSL connect error. Using old copy for refresh'. Anyone have any ideas on how to fix this? I looked in the release notes from some hints and came up empty. Thanks - Lora

Lora by L2 Linker
  • 18735 Views
  • 8 replies
  • 0 Likes

Resolved! User ID Agent Questions (Windows & Intergrated)

I am taking online trainging & I would be super thankful if someone with solid PA experience could answer some questions & provide any helpful feedback. I have a list of true or false questions & I just want to make sure my brain is processing all this information. True or FalseThe Windows agent gets installed on the domain server(s...

Miners do not collect any Information when more than 128 nodes

Hello, I have a problem with my minemeld server. Some days ago I reached 128 nodes (sum of miners, processors and outputs). If I do a commit with 128 nodes or more the minemeld process seems to keep restarting over and over. As soon as I reduce to 127 nodes or less it works again. In the logs I did not find a lot ... 2018-07-24T16:18:32 (7301)...

Remo by L7 Applicator
  • 3211 Views
  • 1 replies
  • 0 Likes

Youtube_Channel Miner

Hi Team, I am in the process of testing Youtube Channel ID miner for a prospect and have completed the configurations as well. Facing a challenge that there are 344 videos in the Channel ID (UCWSpWPuWJKcbo2gGSA-ao8g), but the youtube miners are polling only 237 videos max. Can you help to fix this issue please? Regards, Sandeep Variyam

svariyam by L0 Member
  • 6205 Views
  • 1 replies
  • 0 Likes

dynamic app-id updates without having threat prevention license.

Hello, I have query on dynamic App-ID updates without having license for threat prevention. As per the documentation by PaloAlto, App-ID doesn't requires any additional license but a valid support contract.Considering a scenario where I don't have threat prevention license, how would I get the App-ID updates dynamically? Please advise.

STIX and TAXII support

Hi all, Anyone used minemeld with STIX and TAXII? While we pretty familure with STIX/TAXII - only just booted minemeld for the first time. Cheers, Scotty

ScottyAU by L2 Linker
  • 38600 Views
  • 36 replies
  • 0 Likes

Application Dependency Warnings different between two firewalls - HELP!

Hi all, I am consolidating a lot of old, messy URL/App rules written by my predecessors. I have one rule that is the URL filtering rule for "unauthenticated" users (i.e., those that aren't identified by the User Agents.) It allows "any" appliation. I have other rules that use application sets and custom URL filters, based on user groups. All ...

Resolved! Error delete tunnel interface

I'm trying to delete a tunnel interface, but I have not succeeded, this error comes outThe global protect gateway configuration has already been removed Thanks

error deleting tunnel.png
Idareval by L0 Member
  • 8117 Views
  • 3 replies
  • 0 Likes

Connection Dropped intermittenty in Active/Active VM Series

Hi I have Palo alto vm series 8.1.0 installed with Active/Active HA setup. All the interfaces and vlans have come up and ableto access the zones hosts. But the connection getting dropped very frequently. say like, if i try reaching any other zones it will be pinging for first 10 times, again i see lots of request timed out and it starts conne...

  • 24395 Posts
  • 123 Subscriptions
Top Solution Authors
Labels