This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Understanding Virtual Wire

I am trying to wrap my head around virtual wire from a practical perspective. To me it sounds like an access list apllied between 2 interfaces (e.g Internet & Users). That sounds like a typical concept with firewalls but since security rules would already be called upon to permit or deny traffic between each zone can someone help me under...

Resolved! New To PA- Differences between WebUI & Panorama

My company is about to deploy PA's in a few of our data centers as well as a single Panorama VM. I have a traditional ASA background & want to know some basic theory on how PA's are configured. I am enjoying the free training on the support site but I notice that so far most of it is taught based around configuring from the WebUI. If I un...

Resolved! MineMeld install error bower install

Hi all, I have installed successfully minemeld on a test Ubuntu 16.04. I try to do the same now in production and get an error on bower install : fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": ["bower", "install", "--allow-root"], "delta": "0:00:04.657525", "end": "2018-06-29 10:13:24.610040", "msg": "non-zero return code", "rc": 1...

Global protect data file not downloading_not showing anything in Dynamic updates

we have valid license of GP gateway but Global protect data file not downloading_not showing anything in Dynamic updates. when clicking on check now nothing shows up , tried configuring it as automatic download and install but no luck . https://live.paloaltonetworks.com/t5/General-Topics/Not-showing-dynamic-updates-for-global-protect-data-file-...

Rameshwar by • L3 Networker
  • 4338 Views
  • 2 replies
  • 0 Likes

User Acitivity Reports - Denied Traffic

Afaik the User Activity Reports only show allowed traffic from the users. I am trying to find the URL from an IP, which I can see the user have been trying to visit, but got denied.Is there anyway to do so? The IP is a service from Amazon, and therefor it's not possible for me to make a simple nslookup.

Unable to block Skype

Testing target is Skype which came with Windows 10.Use the method in the link below and was work (for 1-2 days)https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Block-Skype/ta-p/52103 Then 1 day suddenly found that it not working anymore.Since I'm evaluating it (PA-220). There were many configuration changed. Any idea what possi...

jeremylo by • L3 Networker
  • 2432 Views
  • 1 replies
  • 0 Likes

Always-ON VPN in the internal network.

Hello, I am looking to configure an always-on VPN with full tunnel access and enable"Enforce Global protect for Network access".This basically means that users have to connect GP portal to access network when logging in to their machine when off-prem. Giving us the ability to filter the traffic 24x7 even when off-prem. But, I am now facing a cha...

Resolved! Cannot ping INTO mgmt interface, but can ping out?

Did something the other day and now i cannot ping/https/ssh to the firewall on its management interface, even though from the firewall i can ping out. I dont think this is a routing issue as i can do it the other way(out of the device), and the device i am sourcing the pings from is within the same subnet. Also i have checked arp table and mac t...

welly_59 by • L3 Networker
  • 18067 Views
  • 13 replies
  • 0 Likes

OCSP unknown status

Hi team, I am configuring Firewall as CA and local OCSP responder to use in GP VPN with client cert authen.However, all the client cert that I generated from the Firewall got "unknown" status in OCSP. So I client cannot authentiate by this cert. Can anyone please help to find out why? Thank you. admin@PA-VM(active)> debug sslmgr view ocsp all...

Packet Dropped

Hi Team, Need your help.While running global counter I can see continously packets are gettignn dropped with below error. a609598@paf-ld6-mvs-01-01(active)> show counter global filter packet-filter yes delta yes severity dropGlobal counters:Elapsed time since last sampling: 9.310 secondsname value rate se...

IPsec packet drop , once the ecmp is enabled

Hi Team we are facing packet drop issue on ipsec traffic once the ecmp is enabled . we have two ISP and wish to balance the traffic and using balanced round robbin for the same , once this is enabled ipsec packet drop occurs and if we disable ecmp everything is fine . The first internet line is lease line on which the ipsec is terminated and th...

Rameshwar by • L3 Networker
  • 7897 Views
  • 12 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks