This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Mixed Internal and External GlobalProtect

Hi All!I'm working through the "Mixed Internal and External Gateway Configuration" and something isn't quite clear - Do I need to create 2 separate GlobalProtect Portals (one to listen on the outside interface and one for the internal interface) or should I be able to access the same portal using the same IP? Using 2 separate Portals on 2 separa...

Issue with External Dynamic List

I have just created a new/first External Dynamic List on my firewall with a type of URL. I have applied an action under a number of URL filtering Profiles, but I see the following messages: request system external-list show type url name edl-url1 Server error : external dynamic list global/edl-url1 not used in rule after a while the message will...

murphyj by • L2 Linker
  • 3663 Views
  • 3 replies
  • 0 Likes

sip application deny log that hitting trust to untrust any allow policy

Hello, i have a issue this is rule 213. (trust ==> untrust any allow) this is action deny log that hitting rule 213 & sip applicationpackets sent is 1 and received is 0 this is action allow log that hitting rule 213 & sip application both log image is equal destination ipWhy is this happening?if sip session is not created, then the...

20180801_103542.png
20180801_103631.png
20180801_104737.png
hbshin by • L2 Linker
  • 2094 Views
  • 1 replies
  • 0 Likes

Resolved! GlobalProtect VPN and third-party application installed on user's machine (Windows 10)

Hi there, Being a vendor, I'm having a hard time deplyoing my Windows 10 UWP application on client's machines.The application needs access to the internet in order to operate. It loads a login webpage inside webview, using HTTPS (port 443). No other ports or protocols. The problem is that the app fails to load login page on client's machine when...

Problem adding zone to tunnel

I'm trying to add a zone to a tunnel interface. I can create the tunnel and configure it via panorama defining virtual router, vsys and zone to be applied via template. But when I check the devices where it should be applyed both zone and virtual router are defined as "none" for the tunnel even though Panorama is showing the configuration I wan...

ibge by • L1 Bithead
  • 2335 Views
  • 1 replies
  • 0 Likes

Resolved! moving policies and objects to another device group

Policies and objects are currently in the wrong device group. able to move everything successfully except for the address objects. i feel the move is pretty self-explanatory, but i have taken the time to read the user guide and still no luck. is there some particular order this needs to be done? any assistance would be appreciated.

SFP Compatibility

Hi I have got 3 firewalls. 5050 and (3020-1 & 3020 -2 HA pair). We are trying to replace the core 6500 switch with meraki 425. and we have got the MA-sfp-10gb-sr and we need to look for supported sfp in palo side. I found one good fit as PAN-SFP-PLUS-SR (AFBR-709SMZ ). from online. But, I am not sure that whether one end witht the cisco sfp...

Minemeld Installation on RHEL 7.4

Dear Team, I have successfully installed minemeld on RHEL 7.4 and Am able to access the web console from Local Machine but am not able to access from Network. Please help if anyone faced the same issue. Thanks and Regards,Ramprasath

Virtual IP address in HA- Active Passive Mode

Hi Experts, I've query about High Availability Active-Passive. As we know, interface IP addresses are same on both the firewalls and when Active device goes down, secondary firewall will take over by sending gratuitous arp to switches. So switches can learn about the new Mac addresses and traffic start forwarding. But this causes a blip in netwo...

5250's failing to pass traffic after AV software update

Hi, We are on the version 8.1.2 and If I upgrade to the latest ‘Applications and Threats’ version, currently 8044-4859, and then upgrade AV from 2678-3175 to 2683-3180 all rules fail, and traffic drops through the default deny. I do not see any particular logs except "HA peer Anti-Virus set to Unknown". 2018-07-25 08:49:54:user:admin,client:Web...

Bomi by • L1 Bithead
  • 3008 Views
  • 3 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks