General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 193 Views
  • 0 replies
  • 0 Likes

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

 

Rules and Best Practices

 

  1. Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion
...

JayGolf by Community Team Member
  • 875 Views
  • 0 replies
  • 0 Likes

Resolved! How does the PFS Inbound Inspection work?

Hello Team,

 

I am wondering how exactly the Inbound Inspection with PFS works?

 

Diffie-Hellman per definition has the functionality that a key agreement is happening without transfering the key through the "unsecure" channel. All passively listening in

...

tisc by L1 Bithead
  • 3446 Views
  • 1 replies
  • 1 Likes

Impossible? List unused Addres Objects?

I assume there is no report to list address objects that have not been used

 

Ones that may or may not be in rules, relate to long dead or incorrectly entered endpoints, that have not generated any traffic.

 

I have seen the "Shared_dup_and_unused... scr

...

Policy Rules for BFD, OSPF , DHCP and DHCP relay

Hi

 

So do I have to setup policy rules to allow OSPF, I have OSPF on the PA . But when i don't have the rules in place OSPF fails, when i have them it doesn't log anything 

 

DHCP, do I need it if the PA is running DHCP. what is the source and destinati

...

Rules with schedules failing intermittantly

I recently upgraded to OS 7.1.15 on my PA 5050, I have two rules with schedules on them and have had for over a year.  In the traffic logs it was showing the traffic going back and forth between denying and allowing the traffic.  When I removed the s

...

jdprovine by L4 Transporter
  • 3867 Views
  • 10 replies
  • 0 Likes

Captive portal - how to logout?

Hello

 

I need to do changes to my  CP settings. Now I have CP in redirect mode and everything is OK.

 

I have task to setup few computers in library that will allow our students use internet - but after logon. This part is easy ... but students need it

...

_slv_ by L4 Transporter
  • 4655 Views
  • 1 replies
  • 0 Likes

multiple user-ip-mapping sources

I recently configured windows user-id agent and have it in conjunction with agentless user-id. 

Can I have both running on the firewall as a redundancy?or should I remove agentless config?will it create any harm if I keep both running?

Resolved! User activity report Query

Hello,

 

I go to ACC tab -->Onleft side select the time frame --> Network Activity -->User Activity --> Export to PDF

 

1) User activity report when it is pulled it shows Source User and destination User. What is that destination user means?
 
2)Under Dest
...

Farzana by L4 Transporter
  • 2178 Views
  • 1 replies
  • 0 Likes

Check GlobalProtect VPN users with PowerShell GUI

I wrote a simple PowerShell GUI script that can check for GlobalProtectVPN users connected currently, or at a past date.

It uses the Rest API to grab the information. Not sure if anyone would find it useful.

Here is the Github link: https://github.com/

...

paltoshell
molander by L2 Linker
  • 12804 Views
  • 15 replies
  • 2 Likes

Resolved! Wildfire Activity?

Hi folks,

 

We have a Wildfire public cloud subscription, dynamic updates, and security profile configured.

I've been asked, "How do we know it's doing anything?".

 

When I look at Wildfire submissions, the last submissions are from January and end of las

...

wildfire2.jpg
wildfire1.jpg
OMatlock by L4 Transporter
  • 2804 Views
  • 4 replies
  • 0 Likes
  • 24009 Posts
  • 115 Subscriptions
Top Solution Authors
Top Liked Posts
Top Liked Authors
Labels