General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

 

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

jforsythe by Community Team Member
  • 74 Views
  • 0 replies
  • 0 Likes

Join the Fuel User Spark Event on March 19: Dealing with Threats !

 

Join us at the Fuel User Group Spark Event on March 19!

 

Get ready to ignite your cybersecurity knowledge and connect with industry experts at our upcoming Spark event hosted by the Fuel User Group. Whether you're a seasoned professional or just

...

kiwi_0-1709893724672.jpeg
kiwi by Community Team Member
  • 677 Views
  • 5 replies
  • 3 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 3323 Views
  • 2 replies
  • 14 Likes

Antivirus reset-both action for mail protocols

Hi!

 

We enable the blocking email viruses  attachement  by setting the antivirus profile with an action “reset-both” for SMTP.  The virus attachement could be blockded, however the sender’s mail server keep retry until timeout and no undelivered mail

...

BillKuo by L0 Member
  • 6442 Views
  • 6 replies
  • 0 Likes

Authentication policy

Hello,

I'm in proccess of migration from TMG to Palo Alto. One of the rules on TMG whic is used to publish web site to the Internet have AD autehntication enabled. Because I can't change anything on web server and I have to enable some kind of authent

...

Resolved! When to upgade from 7.1.14 to 8.0.6

Hi Everyone,

I know this is more of a personal choice rather than a exact science , 

 I am currently running 7.1.14 on a PA 3600 which is very stable for my organisation at the moment, however I do not want to fall to far behind  firmware levels , so I

...

Skype for Business New IPs Needed For SSL Decryption

 Looks like there are some new IP addresses that need to be accounted for Skype for Business to work w/ SSL Decryption enabled.

 

Here is the MS link plus some of their verbiage, https://techcommunity.microsoft.com/t5/Skype-for-Business-Blog/Updated-IP

...

CarlFrey by L1 Bithead
  • 2211 Views
  • 0 replies
  • 2 Likes

Stuck out of management

Hello guys,

 

I have made a stupid mistake on a PA-820. I have changed the Permitted IP in the Interface Management Settings to a single IP (the Panorama server) and now I cannot access the device anymore.

 

Any ideas? I cannot access even in SSH. The Pa

...

Shye80 by L1 Bithead
  • 2468 Views
  • 2 replies
  • 0 Likes

Resolved! Question regarding VM series HA after a hardware failure

I am new to VM series PAs and looking into how to setup HA.  So it is interesting that the license is attached to the host and VM file location.  Any change in this needs a re-registration of the license via tech support.  Even using VMotion would tr

...

Panorama Read Only mode?

Hi all,

 

I cannot modify my Panorama templates (Network, Device), even though I logged in with the admin account. As I attached the screenshots, it says (Read Only) mode and grayed out the check boxes, so I am unable to modify the Interface Management

...

Panorama_ReadOnly_services.jpg
Panorama_ReadOnly_interfacemgmt_profile.jpg

Multiple DHCP Scope’s on 1 interface

I have a router with 2 VLAN’s. The router is connected to a PaloAlto and behind this PaloAlto I have a server witch serves DHCP. The VLAN interfaces on the router are configured with a helper address to the DHCP server.

 

We would like to remove all se

...

Sjoerd by L2 Linker
  • 6049 Views
  • 6 replies
  • 1 Likes

App-id not working on some Apps

I am seeing a number of applications which have definitions, but are not being identified correctly:  kaokatalk, league of legends, battle.net and guild wars to name a few.  these are showing the correct ports but showing as "unkown-tcp".  Is there s

...

BobW by L4 Transporter
  • 5334 Views
  • 3 replies
  • 0 Likes

Removing peer from HA cluster

I have a pair of PA-3020s running 7.1.x in HA configuration. I need to remove the passive switch from the rack to be used in another location. What is the best way to disable the HA and delete the config from the active switch without risk of service

...

Resolved! Re-creating a specific routing configuration.

Hello folks,


I am trying to reproduce a configuration from work where we use a Metro Line to connect our two sites.  It's working at my job, but not at home.  It seems like a simple setup and I think I am close, but having an issue.  Checking if anyon

...

metrof.jpg
metroc.jpg
metrob.jpg
metrod.jpg
OMatlock by L4 Transporter
  • 3082 Views
  • 5 replies
  • 0 Likes

Interface in vsys

Hello

 

this may sound like a stupid question but i could not somehow find a definitive answer to this in the PAN OS Guide:

 

We have to configure a 3050 iun multi-vsys configuration. We would be needing 2 interfaces per vsys and we wil be having 2 vsys

...

Resolved! Is Zone Protection on Shared Gateways Supported

I have a question regarding Zone Protection on Zones in a shared gateway.  Is it supported.  When I try and configure it it seems to be valid configuration.  However as a shared gateway does not generate logs where do the the ZP logs go?  Also when I

...

CHammock by L2 Linker
  • 3123 Views
  • 4 replies
  • 0 Likes
  • 24124 Posts
  • 100 Subscriptions
Top Solution Authors
Labels