General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 448 Views
  • 0 replies
  • 2 Likes

Resolved! PaloALto automatique update for threat prevention

Hello

 

I need some help in an automatic update for the Threat Prevention.

let me explain to you our design.

We have the headquarter, and the branches, in one of this branches there is PaloAlto firewall, and this PaloAlto is not connected to the internet

...

Resolved! Live community attachments

I used to be able to upload attachments of logs to the Live community. I no longer see this option. I have tried in both chrome and safari. Does anyone have this problem? 

PAN-OS Upgrade

Hi, I want to upgrade PAN OS version 7.0.5-h5 to 7.1.14, so what the versio steps , or can I directly install to 7.1.14?

Resolved! Logs to both Panorama in HA

Hi

 

We have 2 M500 in HA. Lets call them M1 = normally active and M2 = normally passive.

We have PA5000 series firewall and we manage it using the Panorama. 

 

We realised that the Firewall only sends the logs to M1 which is normally OK.

 

But when we trig

...

Resolved! WildFire Submissions no logs

Hi All,

 

PA-3050 PAN-OS 7.1.6

 

While checking WildFire configuration l have noticed strange thing where no logs display on the WildFire Submission or Data Filtering tab:

 

 

When l test with the KB article below can observe that the test file is sent to t

...

WildFire no Submissions logs.PNG
Portal.PNG
CLI.PNG

DNS Sink Hole not working

8.0.4

 

I am trying to get SinkHole to work... Not having any luck,

 

using a dns from the release notes of 2520-3016

 

nslookup gefndb.com

 

returns the real address

 

All looks correct, just does not seem to work

 

---------------------------------------------

...

Do I need Logging Turned on on TAP security rule?

I am implementing a tap interface to listen to our internal network traffic.

 

I don't want all the non THREAT traffic loged, if I turn of loggin in the security rule will the threats still go to the threat log?

 

(I am presently listening only on a very

...

Resolved! IPSec Tunnel performance tips?

Hello folks,

 

I've seen a this article about improving performance by enabling this Adjust TCP MSS.  Ours is not enabled.

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Improve-Performance-for-IPSec-Traffic/ta-p/53301

 

Would this be ena

...

ipsec_performance.jpg
OMatlock by L4 Transporter
  • 4667 Views
  • 1 replies
  • 0 Likes

debug Palo alto firewall rule

we maintain one PA security policy rule and give ip 192.168.0.11 to access server UTP01, the user is using ip 192.168.0.11, and he can't access the server,  we can't find any security log for this. may i know how to debug this rule?

palolili by L0 Member
  • 2177 Views
  • 2 replies
  • 0 Likes

Firewall analyzers

Can anyone let me know about their experience with firewall analyzer tools?  I work at a university and we have 20 PANs, but we're expanding to new campuses in a few cities in the US and one in Italy.  It's going to be tough to manage double the numb

...

Global protect timeout

Here is a peculiar situation.

 

We have some field users who use their hotspot to connect to global protect. Sometimes,they  loose internet intermittantly for couple of minutes so they are being kicked out of vpn session on their machine. But in fact f

...

  • 23703 Posts
  • 110 Subscriptions
Top Solution Authors
Labels