General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Application Dependency Warnings different between two firewalls - HELP!

Hi all, I am consolidating a lot of old, messy URL/App rules written by my predecessors. I have one rule that is the URL filtering rule for "unauthenticated" users (i.e., those that aren't identified by the User Agents.) It allows "any" appliation. I have other rules that use application sets and custom URL filters, based on user groups. All ...

Resolved! Error delete tunnel interface

I'm trying to delete a tunnel interface, but I have not succeeded, this error comes outThe global protect gateway configuration has already been removed Thanks

error deleting tunnel.png
Idareval by L0 Member
  • 8230 Views
  • 3 replies
  • 0 Likes

Connection Dropped intermittenty in Active/Active VM Series

Hi I have Palo alto vm series 8.1.0 installed with Active/Active HA setup. All the interfaces and vlans have come up and ableto access the zones hosts. But the connection getting dropped very frequently. say like, if i try reaching any other zones it will be pinging for first 10 times, again i see lots of request timed out and it starts conne...

arp entry on virtual router

We experienced a loss of routing of two virtual server and their arp to IP information had to be added to a virtual router to get it to route. Any ideas how this could occur?

jdprovine by L4 Transporter
  • 6246 Views
  • 7 replies
  • 0 Likes

Application Submittal

First, awesome service that they do here. I submitted an application a few months ago and the first version made it in to a content release within a month or so. I'm wondering though if the form we use to submit couldn't use an extra field for "Notes" or something. The application I originally submitted had multiple parts, including a web part...

jsalmans by L4 Transporter
  • 2961 Views
  • 2 replies
  • 1 Likes

Resolved! Can comments be added to an EDL?

When adding IP's or URL's to EDL's, I was wondering if adding comments after the token is supported? Either it is a TAB or SPACE or some escape character. Has anyone tried this? I don't see it in any of the documentation. My use case is adding a ticket number or some other identifying mark to tie the line back to an incident.

tshannon by L0 Member
  • 6904 Views
  • 3 replies
  • 0 Likes

Resolved! Panorama - Traffic Logs not showing up on Monitoring Tab

Hello All, Device type : PA M-500Software version : 8.0.10 I'm having an issue with old traffic logs not showing up on the monitor tab.Detailed Logs retention period is 33days GUI & CLI. but i can see only 22days log and after July 18 in monitor tabi can find this with 'show log-collector-es-indices' where can i see other 11days log?Thank you.

20180807_110434.png
20180807_110631.png
20180807_110747.png
hbshin by L2 Linker
  • 9502 Views
  • 2 replies
  • 1 Likes

Decrypt error (soap)

Hi, We realised that we are receiving decrypt errors accessing to O365 from inside to outside. We are doing decrypt in sessions. But we dont know why the sessions are finished with "decrypt-error". Any idea?

error.JPG
BigPalo by L4 Transporter
  • 5365 Views
  • 4 replies
  • 0 Likes

PAN Version recommended

Hello,This is Paul Castro from ITstrap Mexico, i would like to know if there are a KB or documents to know wich are the recommended Operating System to install in different model devices.For example:PAN 200 install 4.1.6 PAN version "recommended"PAN 500 install 4.1.4 PAN version "recoomended"Thank you.Paul Castro

itstrap by Not applicable
  • 8530 Views
  • 7 replies
  • 0 Likes

Speed Issue due to QoS

Hello, I am experiencing speed issues that I believe may be related to the current QoS configuration on my PA-3020 firewall. I currently have 2 different QoS classes defined: Class 1 & 2. I have three applications under class 1, and one application under class 2. However, under the QoS profile assigned to my outbound internet links, I have a...

Farzana by L4 Transporter
  • 5175 Views
  • 3 replies
  • 0 Likes

Resolved! URL Object FQDN settings

Hi, i must set the firewall to connect to this webpage www.google.com/recaptcha/api/siteverifyI have a object -> adress groups -> own address group for some other adresses (like itunes.apple.com and so on. There I musst now inser this domainwww.google.com/recaptcha/api/siteverifyBut i Can set this as a FQDN like the others because "The val...

user id not identifying user correctly

Hi All,In the middle of a domain migration and users that have been migrated are not being identified correctly. The user that is logged into the new domain gets a blocked message but on the blocked message where it displays the username it shows their old domain \ username. (username being correct and the domain being the old one).I have the us...

Web-browsing application being identified instead of SSL on port 443.

We just noticed that in our traffic logs there is traffic with the web-browsing application identified with a destination port of 443. The rule it is hitting on is only a port based rule with 80 and 443 as dest ports. My question is why would the traffic match the signature of web-browsing since the standard port in the App is 80? Is it because...

  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
Labels