This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Ingress exception counters

Hey, all! Does anyone know something about FPGA Exception global counters? Especially these counters: flow_fpga_rcv_igr_INTFNFflow_fpga_rcv_igr_IPFRAGMENTflow_fpga_rcv_igr_PROTO I see packet drops on FPGA showed by counter flow_fpga_ingress_exception_err. Also the counter has the same rate as flow_fpga_rcv_igr_INTFNF. I'd like to understand wh...

m0tash by • L1 Bithead
  • 1750 Views
  • 1 replies
  • 0 Likes

BGP enabled BFG Profile, 1 of the peer will marked down by bfd control detection time expired for BFD session.

2 BGP peer . 1 bfd profile can be used for BGP . 1 of the peer will trigger a Critical/high system log. The log is BFD state changed down for BFD session 6 to x.x.x.x on interface x.x Protocol :BGP BFD control detection time expired for BFD session 6 to neighbor x.x.x.x on interface x.x Protocol :BGP The BGP peer should be failed ,restarted...

Block Google Drive Desktop app

Hi all, Could you guide me on how can I block the Google Drive Desktop app? I've been reading articles and previous posts, but I couldn't understand them properly. If anyone could provide me with any insights, thanks for your time. #googledrive

Support Portal is down.

The palo support portal (that website that lets you register devices and create support cases in the first place) is currently down and has been down for over an hour now. This is a huge issue that needs to be addressed. I can not register any new devices.

Resolved! Experiences with skipping the base image.

Hello.so slowly but surely I'm upgrading a large number of palo alto's from versions 7.1.x to eventualy version 8.1.6( or higher) In my palo alto training. and from some upgrades done before of pavm100 specifically. I always loved the fact that you can basically skip the install of a base image(though not recommended)I don't like to do it with x...

Resolved! Upgrade PAN OS from 10.1 to 11.1

Hi Community, My customer plan to upgrade their PAN OS from 10.1 to 11.1 From documentation said, You can now use the Skip Software Version Upgrade feature to skip software versions when upgrading your device from PAN-OS 10.1 or later releases. What is skip software version upgrade?, How to use it? so that I can go direct upgrade to 11.1 with...

HSutanto_0-1709107246673.png
H.Sutanto by • L1 Bithead
  • 47783 Views
  • 21 replies
  • 0 Likes

Template stacks limitations

Hey all,I think I am hitting a limitation on the template-stacks, but maybe there is a nice workaround that you guys can help me with... Contrary to Device groups, which have "shared" objects, templates use stacks which is a little different.The limitation to this seems to be that you can not reference a template value between different template...

mr.linus by • L4 Transporter
  • 9705 Views
  • 6 replies
  • 2 Likes

Resolved! Cannot see Dynamic IP lists

We are currently going through the process of setting up new PA-820s for use in our environment.We should have access to the following External Dynamic IP lists on these devices based on our licensing, however they are not being displayed.I have enabled all licenses / authorization codes in the portal. Unit has Internet access. Using Mgnt interf...

Old PA220.png
New PA820.png

Traffic Log query for FQDN object errors with "ip range [fqdn] expansion exceeds maximum number of items allowed"

I created a new FQDN object and added it to a security policy. After committing changes, I tried to validate the rule was working, but I get this error in the traffic log when searching for (addr in 'my-FQDN-object'): The security policy rule is not working either. It should allow access to this FQDN address, but is not triggering I can s...

MatthewHale_0-1732120150610.png

I want to allow gmail access to specific users on my LAN segment.

I have created a policy which says "Src: FQDN of 2users" "DST:Any" "App: gmail-base, gmail-posting, ssl, stun, vidyo, web-browsing" "URL CATEGORY: Computer and internet info, web-based-email" "Action: Allow" But the logs I see is, those users are not hitting this policy (They are still passing through the default policy even the above created ...

  • 24393 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks