This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Diffrent Customer, and One Vsys

Hello all brothrs,We working on a big project and i have this question plz:we have a case wich we have 1 vsys but a diffrent customer, i need to give every customer an access to this Vsys, but every customer mustn't see the configuration of another customer, "Access domain" can do that? if not how i can do that ? Thanks.

Resolved! Certificate creation - unable to export CSR

Folks. I'm trying to generate a CSR for a new security certificate for one of my firewalls. I can generate the CSR just fine. it shows int he certificate list as "pending". Which is what I expect. What I can't do it export the CSR. I select it, click "export" from the action options, and the screen just blanks for a few seconds and goes back to ...

darren_g by • L4 Transporter
  • 7871 Views
  • 3 replies
  • 0 Likes

Resolved! Panorama deployment in active standby

HiHave a basic question about two panorma devices which are going to be in active standby in the same rack.Is below config supported on Panorama? Eth1 will be enabled for all functions besides management and Eth2 will act as its backup

josggf by • L2 Linker
  • 3162 Views
  • 2 replies
  • 0 Likes

Resolved! PAN-OS 8.x Clone Policy default order

Hi Community, I noticed, that upgrading to 8.x changed the default behavior for cloning policies.On PAN-OS 7.1 after cloning the policy, the default behavior was to move the new policy after the cloned one. On PAN-OS 8.x the policy is moved to top by default and you have to choose rule to copy after manually.That is quite annoying, when editing ...

Chacko42 by • L4 Transporter
  • 5011 Views
  • 6 replies
  • 0 Likes

Resolved! Security Advisories

Hello everyone, How can I add and/or remove people who receive security advisory emails? Thanks

SShannon by • L1 Bithead
  • 4094 Views
  • 4 replies
  • 0 Likes

Resolved! How Ipv6 Configuration

Hi, i have a ETH Connection with static ipv4 adresses configured. But now we cannot surfe onto ipv6 websites. So how can i configure this?we have static ipv6 adresses but where must i configure these?

Android 8 VPN native client

Hello, we recently upgraded one of our firewalls to version 8.0.9 in order to allow newer Android versions to connect using its native VPN client. Android 7 clients are working now but we recently found out that Android 8 does not work with this version nor 8.0.6 that we have installed in other of our firewalls. Anyone aware of that? I haven't ...

ibge by • L1 Bithead
  • 4044 Views
  • 4 replies
  • 0 Likes

Resolved! Connected by GlobalProtect but can't get access in spcecific port

Hello brothers.I'm connected with GlobalProtec VPN, i can access to the local network from the external, i can ping on local machine, i can use rdp for some servers, but when i want use mstsc for an @IP:port, for exemple 10.0.0.1:10100 in order to run some remote application, i can't do that, also i can telnet on 10.0.0.1 by 10100 port.NB: when...

Decrypted SSL to web-browsing question

I've been playing around with a new service we're bringing online that has an Internet facing site using our public cert. I decided to go ahead and stick Inbound decryption on it and, of course, this means my SSL now looks like web-browsing over TCP 443. What I'm not sure on is what the actual best practice is here. I know this has been a long...

jsalmans by • L4 Transporter
  • 3863 Views
  • 3 replies
  • 0 Likes

Resolved! wildcard fqdn for destination in security policy, custom URL category

Hello folks, I want to use a wildcard for a FQDN, e.g. *.paloaltonetworks.com I want to use this as an object with a FQDN for the destination. I read in the following article I need to create a custom URL category, and use that in the "service/URL category" as part of the security policy. I was hoping to use this as a destination IP addres...

Jedi_D by • L2 Linker
  • 34746 Views
  • 3 replies
  • 0 Likes

Resolved! HIP Data From GP not match client machine

Hi all , I would like to know about when use GP and HIP check while collect hip data I see information not match example I have anti-virus vendor "T" and on client machine then agent version 10.2.3.xx but on GP HIP Host state will show Anti-virus vendor "T" is 10.2.2.x.x why get collect data not match with client machine ,However, I use resu...

Application Override

Hi there, My client has an internal application that doesn't need App-ID (Layer 7) scans for better performance. When I created the Application Override, under the "Protocols/Application" tab, there are 2 fields, one is Port and the other is Application. I am very confused on these two fields. Port - Is it saying traffic utilizing my defined po...

huntlee by • L0 Member
  • 4608 Views
  • 3 replies
  • 0 Likes
  • 24415 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks