General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 320 Views
  • 0 replies
  • 0 Likes

Firewall analyzers

Can anyone let me know about their experience with firewall analyzer tools?  I work at a university and we have 20 PANs, but we're expanding to new campuses in a few cities in the US and one in Italy.  It's going to be tough to manage double the numb

...

Global protect timeout

Here is a peculiar situation.

 

We have some field users who use their hotspot to connect to global protect. Sometimes,they  loose internet intermittantly for couple of minutes so they are being kicked out of vpn session on their machine. But in fact f

...

Source Translations

I'm trying to find out how to get all the static source translations for a perticular subnet on our Pan 7050. I'm trying to make a spreadsheet to keep up to date static ip's being used. Can do such a command cli on the Pan. I was able to do on a Cisc

...

Resolved! GlobalProtect Inactivity Timer - is HIP Profile required?

So in the configuration of GlobalProtect ( v8.0.5, under Network > Globalprotect > Gateways > (gateway name) > Agent tab > Timeout Settings)  There's an 'inactivity logout' setting, that has a description of 'Users are logged out of GP when the gatew

...

Multiple ISP PA5250

Hi 

I have been asked to purchase a new PA 5250.

It will potentially have 20GB throughput to the internet.

i am looking at an active active setup, with Aggregate interface inside to each FW.

On the Outside i have been asked to connect to 4 x ISP 5GB Band

...

Resolved! Site to Site VPN Tunnel - NAT

Hello everbody,

 

I am most likely struggling with a NAT problem in a site to site VPN tunnel, hoping you have an idea or tip to this topic.

The setup is a site to site VPN tunnel between a PAN and a Cisco ASA.

There is a host (172.16.2.20) behind the PA

...

Resolved! PaloAlto WAN Interface segmentation

Hello

 

Please help me in this scenario

 

There is the big "Company Site" and the other branches point to this Site, there is an MPLS connection between the branches.

Our need is, the PaloAlto supports segmentation on the WAN part ? can we create a sub-in

...

VRF WAN.jpg

candidate configuration

Hi,

What is candidate configuration and what is the purpose of candidate configuration ?

What is the differnece between save candidate configuration and the save using the button on the top right corner ? 

What is the differnce between save candidte con

...

simsim by L4 Transporter
  • 3212 Views
  • 4 replies
  • 0 Likes

Resolved! Can Palo Alto firewall act as a SCEP server

I would like to generate a SCEP request that I want to have signed by the CA on the Palo Alto firewall.  I have beel looking at the documentation and asking my buddy Google, but have not found a way to do this.  I am thinking this is not supported.  

...

Firewall VM for GNS3

 

Hello everyone.

 

Can anyone please tell me the steps to getting a PA-VM for GNS3? I've been doing some reading and need to practice using a virtual environment.

 

Thanks.

QoS on Tagged VLAN Sub-interface - PAN5250

Hi, this question may have been asked before, but I'm still curious what the best practice is in my situation.  Here's what I need to do: a LAG (port-channel) with two 10gig interfaces is carved into mulitple subinterfaces.  I'd like to cap the max b

...

Global protect IP address

GlobalProtect gateway client configuration generated. User name: bozo, Private IP: 136.176.144.x, Client version: 4.0.0-90, Device name: clownmobile, Client OS version: Microsoft Windows 10 Pro , 64-bit, VPN type: Device Level VPN.

 

Why is the PA clas

...

jdprovine by L4 Transporter
  • 3083 Views
  • 7 replies
  • 0 Likes

Resolved! Top countries where cyber attacks originate

Good day everyone, 

I am looking for some help information with finding "Top 15 countries where cyber attacks originate"

I know there are alot of blocklist out there, those have IP addresses. That is not what I am needing. 

 

If anyone can recommend webs

...

  • 23823 Posts
  • 112 Subscriptions
Top Liked Authors
Labels