General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 265 Views
  • 0 replies
  • 1 Likes

Resolved! Problem with Panorama shared context

Hi, I am currently migrating our firewalls to Panorama and have a problem with shared settings.

Every Panorama commit shows me Warning:

 

  • Disabled applications in shared: intercall google-spaces-base google-spaces-posting zenefits gitlab-base gitlab-upl
...

linhartj by L0 Member
  • 6112 Views
  • 2 replies
  • 0 Likes

GlobalProtect Users appear on GUI and not on CLI

PANOS 8.0.5

Current connected GlobalProtect Users appear on GUI by “Monitor/User-ID/Source-type=globalprotect” and not appear on CLI "show user ip-user-mapping all type GP”: the record is not absolutely present.
On PANOS 7.1 the CLI command "show user
...

Aiace by L1 Bithead
  • 2615 Views
  • 1 replies
  • 0 Likes

File minemeld-web.conf doesn`t exist

I`m looking for file minemeld-web.conf  into /etc/nginx/sites-available/minemeld-web.conf  directory but it doesnt exist, there`s only default file.

 

I need to change HTTPS services to HTTP

 

I installed the super fast setup from the site https://live.p

...

vhgambit by L1 Bithead
  • 3170 Views
  • 1 replies
  • 0 Likes

Resolved! OpenConnect client with a Global Protect plugin

Hello,

 

We found that only 1 factor authentication is required when connecting to the VPN using OpenConnect client with a Global Protect plugin, it appears that it bypasses the portal authentication and only requires the gateway authentication. We hav

...

Farzana by L4 Transporter
  • 20644 Views
  • 2 replies
  • 1 Likes

Licence NFR PaloAlto

Hello

 

I just receive my PA-850, i made the registration of the device in support section, but after this registration, i can't see the licences for the new device :

Threat Prevention
BrightCloud URL Filtering
PAN-DB URL Filtering
GlobalProtect Gateway
Glo
...

nfr palo.jpg

Resolved! Log Forwarding for Flood event

I'm familiar with the process of setting up a log forwarding profile and attaching it to a security rule.  But how would this work for alerting on a flood event?  In a flood the attacker IP is 0.0.0.0 and the victim IP is 0.0.0.0.  This won't match a

...

Global Protect on macs using active directory logins

Hi

 

We use ad accounts for users to login to the macs (arrange of MacOS versions), but from a certain day we been told that users need to use global protect to VPN in our sister company to use certain resources, mainly email.

 

Once global protect is on

...

slinxy by L0 Member
  • 1493 Views
  • 1 replies
  • 0 Likes

Application Risk level

What happens when you change an application risk number from a 5 to a 1? Does this just change the read out of your risk level or does it change the way the firewall acts on the application?

jdprovine by L4 Transporter
  • 3709 Views
  • 4 replies
  • 0 Likes

Schedules expired

Hi Community

 

I see when the schedule policy has expired the rule continue as a enable rule but It doesn´t work because the rule has expired,

Can you tell me how I can find the expired schedules?, is it possible to configure somehow when the rule has e

...

ftrimino by L0 Member
  • 3197 Views
  • 3 replies
  • 0 Likes

Blocking Bittorrent

Hi Everyone,

 

Is there a way to limit the sessions on bittorrent with Palo Alto ?

 

You can only enable a session limiter based on a service, but not on an application i think?

 

Anyone has some suggestions ?

 

Goal-> Limit bittorrent traffic. Users

...

Resolved! Source User Missing. Device has User Mappings.

I'm sure this is probably a rookie mistake, but I have to ask...

 

I've set up our Meraki access points to syslog to my PA500 firewall.  I'm successfully getting user-id to IP address mappings (I can see them in the output of "show user ip-user-mapping

...

Resolved! QoS: why is it capped at 1 Gbps?

Is it a physical limitation, or a software limitation?

 

The PA-3020 has gigabit ports, which can be combined into aggregate interfaces that support multi-gigabit combined throughput.  However, it you enable QoS on an aggregate interface, no matter how

...

fjwcash by L4 Transporter
  • 3519 Views
  • 2 replies
  • 0 Likes

Google Hangouts audio-video detecting as STUN

I am noticing an issue were clients are using Google Hangouts, but the APP-ID is detecting the session as STUN over UDP/TCP port 19302-19309, instead of the APP-ID signature of google-hangouts-audio-video.  Has anyone else noticed this behavior?

 

The

...

log snapshot.JPG
  • 23631 Posts
  • 107 Subscriptions
Top Liked Authors
Labels