This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Proxy ARP

Hi

 

I have a 5220 in the DC and a 850 in the office

On the 5220 I have an interface onto network 2.7.3.0/24
On the 850 I have a NAT for 2.7.3.129/32
the 5220 get this via OSPF

How can I make the 5220 response on the interface 2.7.3.0/24 for arp requests f

...

OSPF and Cisco Routers

Greetings all,

 

I was doing some Core routing work during an outage this last week and ran into a repeat of some issues we had when we initially put our PAN boxes in to place.  The original scenario:

 

  • A subinterface existed on the Palo Alto with the ta
...

jsalmans by • L4 Transporter
  • 4890 Views
  • 2 replies
  • 0 Likes

Resolved! NAT Security rule

I'm used to working on Cisco ASA and I'm having a hard time understanding why the security rule states Untrust-L3 for both the source and destination zone. Typically wouldn't that be Untrust-L3 to DMZ? Is there a specific reason for this behavior?

 

 

Screen Shot 2018-01-06 at 6.57.18 PM.png
Glitchen by • L0 Member
  • 2016 Views
  • 2 replies
  • 0 Likes

DNS proxy not working

Hello,

 

We are currently getting resolve-fail events for DNS. 
Failed to resolve domain name: after trying all attempts to name server(s): 8.8.8.8 8.8.4.4
DNS server is in loopback.2 Interface/Untrust/IP:203.44.x.x
 
Below are some pics of DNS proxy setti
...

sessiondetails.jpg
DNS Proxy.jpg
Farzana by • L4 Transporter
  • 4657 Views
  • 3 replies
  • 0 Likes

Outlook and Global Protect

In the past when our users disconnected Global Protect, Outlook would disconnect immediately.

 

Seems like this no longer the case. When GP is disconnected Outlook continues to work.

 

I'm wondering if anyone has every eperience this before?

 

Thanks

berket13 by • L0 Member
  • 2593 Views
  • 4 replies
  • 0 Likes

Resolved! Expressway-E and C and NAT and VW

Hi,

 

I have deployed Expressway (cisco ToIP) E and C  as per the diagram below .PA is in VW mode .

Does it work  without any changes in the PA ? 

Or Is there any policy must be created ? 

 

Thanks 

PA.png
simsim by • L4 Transporter
  • 2348 Views
  • 1 replies
  • 0 Likes

Response Page Issue

https://mail.yahoo.com (web based email) and https://web.tresorit.com (online storage and backup)  are both  blocked via url category filter as per screen shot. But... I am only getting the response page for mail.yahoo.com.

web.tresorit.com just gets

...

URL-Block.png
Mick_Ball by • L7 Applicator
  • 1879 Views
  • 2 replies
  • 0 Likes
  • 23720 Posts
  • 104 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks