General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 375 Views
  • 0 replies
  • 0 Likes

Resolved! GlobalProtect with MFA/Dual Authentication

I've been looking up and down and can't seem to find a solution. I'm trying to authenticate to the GlobalProtect gateway or portal via Radius (which is tied back to AD) then to DUO for MFA. 


The user should point to the portal/gateway, receive a usern

...

How to Block specific HTTPS Sites?

Hello,

 

I'm struggling to block some internal https sites.

 

I have to block various sites/urls of a server from a specific zone, while I have to keep some others open 

The urls look like:

https://servername.suff.dom:8443/aaa/bbb/ccc/ddd/eeeee_ff_applicat

...

PhLang by L1 Bithead
  • 2645 Views
  • 5 replies
  • 0 Likes

Replacing PA500 with PA220

Currently have a PA500 (in virtual wire mode). Ordered a replacement PA220. I followed the instructions on connecting to the new unit and assigning a new IP address. It too is in Virtual wire mode. I need to understand how to transfer my configuratio

...

jharlow by L3 Networker
  • 3114 Views
  • 3 replies
  • 0 Likes

Authentication Tab Error

 

Hi 

 

After upgrading to 8.1 version, I can not see the Authentication and User-ID tabs

this happens only with my user

 

authentication tab

Screenshot_1.png
Frazão by L1 Bithead
  • 1734 Views
  • 1 replies
  • 0 Likes

Managed devices list export

I thought this would be something easy to look up and preform but I am obviously to optimistic.  What I would like to do is export a CSV or txt file with all the managed devices out of Panorama with thier device name, model, OS Version #, HA status,

...

vseward by L1 Bithead
  • 3884 Views
  • 4 replies
  • 1 Likes

Resolved! Disable User-ID Syslog messages

I get litterally millions of the syslog messages below (different users), and I think that they have to do with the user-id agent or user identification in someway.  Currently I am logging absolutely everything to a syslog server that pumps it all ov

...

DIRTT by L2 Linker
  • 2691 Views
  • 2 replies
  • 0 Likes

ssl err_cert_authority_invalid

Hello 

 

I have added our selfsign SSL that we generated from a windows CA server for our district. When I add it to the firewall under the Device Cert and use it for the forward trust I am getting this error 

 

ssl err_cert_authority_invalid

 

I am not su

...

Resolved! Power Module failure

Is there any other way to see if a power modules as failed? I just happened to notice the LED lights were red on the front of the secondary PA but my primary PA is in another building altogether so I would not know without going over there.

jdprovine by L4 Transporter
  • 4909 Views
  • 13 replies
  • 0 Likes

Qos Policies for G-rollout.

For G-site rollout effort,is there a way to write Qos policies so they apply per client IP flow when they are communicating to google IP address?    A way to give rate limiting per client IP(thousands of clients) for google destination IP?     The ke

...

kpotru by L1 Bithead
  • 2635 Views
  • 4 replies
  • 0 Likes

MineMeld age_out not withdrawing ips

I'm very new to MineMeld, and I am having issues withdrawing ip addresses from a list. 

 

The miner checks a local list, and the list has two ips in it currently. I'd like the ips to be age_out after 24 hours, even if they are still on the local list

...

PF by L1 Bithead
  • 7773 Views
  • 12 replies
  • 0 Likes
  • 23835 Posts
  • 112 Subscriptions
Top Liked Authors
Labels