General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

World Cup 2018

Anyone have a custom APP-ID to block world cup 2018? or is palo going to release one?

Ntripp by L1 Bithead
  • 5540 Views
  • 5 replies
  • 0 Likes

Resolved! Taxii Feed Error

Dear all, today my Taxii Output stopping working, in minemeld-engine.log i see these errors: 2018-06-15T13:23:33 (24179)actorbase._actor_loop ERROR: CyberSOC-taxiiDataFeed-Test - error executing ActorCommand(command='update', kwargs_={u'source': u'MISP_CyberSOC_anyEvents', u'indicator': u'https://pastebin.com/v10rKA6d', u'value': {u'confidence':...

rafy92 by L1 Bithead
  • 6856 Views
  • 5 replies
  • 0 Likes

Failed to resolve domain name

Hi,i get in the system monitor a message Type dnsproxy and event resole-fail mgmt-obj 'Failed to resolve domain name:server.domain.com after trying all attempts to name server(s): IP_from_internal_DNS 8.8.4.4 'and i dont know why.I have set and Object for the server.domain.com DNS Name to the IP but error comes again.In Device -> Setup ->...

Globalprotect client VPN for remote users and Office LAN users?

My company has a number of offices which do not have an on-site fw but instead have a router to connect to corporate MPLS through which they also receive internet.I’ve been asked to look at implementing a globalprotect vpn for all users whether they are on office lan or remote. Is this a standard use case, tunnelling all traffic through vpn to t...

welly_59 by L3 Networker
  • 4918 Views
  • 5 replies
  • 0 Likes

Global Protect and CCMCACHE

I have a user that I am trying to reinstall Global Protect (v.4.0.6-7) for. However, whenever I try to install it, i get message that it is trying to find globalprotect64.msi in c:\windows\ccmcache11. CCMcache11 does not exist. So I pointed the installation to the msi file I had for it in the downloads folder but it then said it was corrupt. I ...

Arena225 by L0 Member
  • 3916 Views
  • 3 replies
  • 0 Likes

OSPF Adjacencies Flapping over IPSec Tunnel

Hello, I would like to open this issue up for discussion, and possible resolution. We have an IPSec Tunnel between two Palo Alto Firewalls (PAN 3050 & PAN 820), and we advertise OSPF routes to interconnect both sites, over the tunnel. This was working fine for months with no issues. Four days ago, we upgraded the 3050 from PANOS7.1 to PAN...

want to upgrade to 8.0.X

Hey guys,I have a HA pair of 3020s with 7.1.7and a single 820 firewall with 8.0.2 Which version can you recommend for the 3020s and the 820? 8.0.5?8.0.6?Is there anything to be aware of?

MPI-AE by L4 Transporter
  • 7441 Views
  • 14 replies
  • 0 Likes

Resolved! I have two questions. about UDP Application & policy action

Hello, I have two questions. 1. How can Paloalto Firewall identify UDP Applications (ex : sip, ntp, sip, dns, snmp, tftp..) with one packet from source received ? 2. when i configure service any What is difference policy action deny & drop? Best regards.

hbshin by L2 Linker
  • 2836 Views
  • 1 replies
  • 0 Likes

PA-5200 QSFP+/HSCI DAC Cable type

Hi, PA writes in his Front Pane description HSCI port "PA-5220 firewall —One QSFP+ 40Gbps port (supports only a 40Gbps (QSFP+) transceiver or QSFP+ active optical cable)." and nothing for the QSFP+ ports. Does PA-5200 also support 40G QSFP+ DAC Passive Copper Cable and if so on QSFP+ and HSCI Port? Has anyone tried out? Regards Robert

Resolved! VPN set up when other party uses L2TP

Hi Members I have a vpn to set up when the peer end has asked for L2TP Ipsec. The other end is using some windows based built-in VPN.Can this be set up? Does PAN support L2TP? Thank you

R_Sharma by L2 Linker
  • 3100 Views
  • 2 replies
  • 0 Likes

VM-50 DNS problems

Hello allUsers unable to access some websites especially google.com, gmail.com. There isn't anyblock rule for internet access for the users.

Radmin_85 by L4 Transporter
  • 1803 Views
  • 1 replies
  • 0 Likes

Resolved! Can Hard Drives be hot-swapped in M-series appliances?

I see some unclear documentation so I'd like to get full clarification on this. I see some how-to guides saying to power down an M-100 to replace a failed drive. However, adding drives to an M-series appliance makes no reference to this. The hardware guide also has an odd note about powering down for any maintenance, yet doesn't include that as ...

Possible Bug w/ "Green" tag

It seems in version 7.1.15 of Panorama there are two "Green" tags that are different colour. But it seems you are only able to select one. If you attempt to select the Green at the bottom of the drop down list, it instantly reverts to the darker green near the top of the list.

Resolved! Installing config on a different model.

Hi there. I have a site with a 3020 (the only reason this site has a 3020 is when the device was bought, everyone thought it would be doing more than it is). They are in a region that doesn't have 4-hour support, so they wanted a spare. The only thing the 3020 is doing is running a IPSEC tunnel to corp, and handing SIP traffic from 2 internal ho...

  • 24397 Posts
  • 123 Subscriptions
Top Solution Authors
Labels