This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Active/passive HA on PA5020

I am using this link https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-High-Availability-on-PAN-OS/ta-p/54086 to try to configure active/standby HA on my 5020 and I am confused about the ports (control links (CL) ha1, CL ha1 backup, data link (DL) ha2, and DL ha2 backup) and the assigned IP addresses. Why do I need to ...

Capture.JPG
jac101 by • L2 Linker
  • 3296 Views
  • 3 replies
  • 0 Likes

Resolved! How to Use DAGPusher / DAG

I cannot find any documentation on these prototypes. How does MM know what devices to push to? It seems to me we would need to clone stdlib.nonpersistentDagPusher or stdlib.dagPusher and enter some configuration. I also don't understand the difference between persistent and nonpersistent. Since the output doesn't live on MM, I would hope ...

Updating Panorama device templates after forced changes

I've run into a couple of situations where I've had to update the firewall configuration manually because it was disconnected from pan (The ISP forced me to change IPs). The config in Panorama remains unchanged. How do I update this without deleting and re-adding the device? Can I just do another import device config like I'm doing it for the f...

Failed to get WF-500 UPDATES

Hello allThe problem began 3-4 days ago WF -500 stop to get updates.In the Dynamic Updates section when we click check now button the updates of Antivirus and Apps and Threats is ok but not WF-500 UPDATESSome screenshots from the inside of WF-500

a873bde2-606f-4c02-a7d4-3f9c06d5fff2.jpg
e3d3a054-8ae9-4569-925a-e18d8a84f804.jpg
Radmin_85 by • L4 Transporter
  • 3923 Views
  • 3 replies
  • 0 Likes

Resolved! Web GUI shows white screen after loading from Context menu

Currently on Panorama 8.0.9 and I've run into an issue where I am getting a white screen on the web GUI when going to a firewall via the dropdown menu from Context. Normal navigation through Panorama works and I'm able to access each of the firewalls through their own GUI. Also a management server restart did not fix this issue. Has anyone else ...

Detailed Documentation

Does anyone know if there are any plans on releasing detailed documentation for MineMeld? Specifically, I am looking for documentation on writting my own prototypes. I know that can can use existing ones as templates, but I would like to see documentation for all of the prototype settings that are available. A detailed User Guide would be nice too.

Resolved! Help with understanding OSPF FIB decision

Hi All, this weekend I had to clean up an asynchronous routing issue, by disabling route advertisement on one side. I have a WAN, which is an upside down triangle, with A and B at the top, and C at the bottom. C was routing right, C->B and traffic was coming back through A, A->C. I disabled advertisements from A, so traffic now flows C...

Resolved! Cisco Guest Mobility Anchor Controller Tunnels are down when placed behind Palo Alto firewall

Hi, I have a pair of Cisco controllers setup as mobility anchor controllers, which will basically initiate EoIP tunnel between them. Recently we have placed a Palo Alto 5250 firewalls between the controllers through virtual wire interfaces. The physical connectivity is as follows Cisco Controller 1 ----> Palo Alto VWire-IN -------> Palo A...

shabeeb by • L1 Bithead
  • 5325 Views
  • 3 replies
  • 0 Likes

8.1.2 file-blocking / logging traffic direction

Hi all, after updating from 8.0.x to 8.1.2 we noticed the following behaviour: In the Data Filtering Monitor the direction of the traffic has moved.Connections previously shown as 'from internt to lan' are now shown as 'from lan to internet'.This when downloading a file.A colleague just remembered that there was a notice that all traffic logs wi...

ABux by • L1 Bithead
  • 4745 Views
  • 3 replies
  • 0 Likes

DMZ network redesign

Hi all, I'm hoping someone can help me avoid a huge overhaul and outage window of our DMZ network... Our DMZ gateway is currently a Palo interface with GlobalProtect enabled on it. Servers on the DMZ are at a remote site connected via a Layer 2 spanned VLAN. We intend to decommission this L2 link and move to a L3 VPN service. We have an entire p...

dmz.jpg

Problem with File blocking

Hi all i need to prevent all downloads on a network using Palo alto without affecting browsingi created a file blocking profile , denied all extentions in the download direction and applied it in a policybut iam still able to download many exe and jpeg for examplei dont have a decryption policy in placeis it necessery ??

AKabary by • L2 Linker
  • 4162 Views
  • 2 replies
  • 0 Likes

PBF and cisco vpn client

Hi everyone i have two ISPsinterfaces connected to my palo alto i need to make a pbf forcisco vpn client app traffic to cross through the second isp in the pbf section in policies , i set the application to cisco vpn and ipsec-udb and IKE and set the destination and next hopbut traffic still go through the first ispwhat am i missing?and is it ...

AKabary by • L2 Linker
  • 5202 Views
  • 6 replies
  • 0 Likes
  • 24443 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks