This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

cannot commit as one service keeps shutting down

first here is the specs: Firewall : Pa1410 version : 11.2.4-h1 here is all the details of the issue : 1- device > syslog -> syslog profile -> custom log format -> and changed the default format of GlobalProtect to location=$location, portal=$portal, actionflags=$actionflags, attempted_gateways=$attempted_gateways, auth_method=...

Blocking unknown devices that are not within the domain

Hello everyone, I am a Palo Alto PA-450 user. In our organization, we removed around 20 computers from the domain due to their outdated versions. However, these computers continue to log in using the credentials of the last user who logged in while they were still in the domain. This is not a major issue for us. The problem is that these compute...

Resolved! Panorama software download issues

Having two issues while attempting to upgrade Panorama from 10.1.13 to 11.1.5; 1) On the primary Panorama VM, try to preload all the versions for each step of the upgrade like we do on a firewall. The new version, say 10.2.0 seems to download properly. But when we try to download 11.0 it vanishes. 11.0 vanishes when we go back and try to downloa...

Jim007 by • L1 Bithead
  • 4599 Views
  • 2 replies
  • 0 Likes

Sync firewalls with Panoram

if I configured the firewall interfaces locally first, then imported the firewall into panorama, the firewall interfaces would display in the Panoram with a little icon.How about the interfaces I configured after the firewall is imported into Panoram, those interfaces are supposed to display in Panoram by default?if not, any way I can import th...

gongya by • L3 Networker
  • 1063 Views
  • 1 replies
  • 0 Likes

Can not block x-vpn on port 80

Please can we have some assistance with blocking x-vpn. We currently have Decryption enabled DNS proxy enabled The threats are set to reset/drop/block in screenshots Despite all of this, the HTTP-2 connection method in x-vpn successfully establishes a connection by obfuscating as random allowed sites such as www.office.com [office.com], www...

Salathiwe by • L3 Networker
  • 1437 Views
  • 1 replies
  • 0 Likes

User-ID Connection Security Won't Work

UserID Agent version 9.0.5-8Firewall 9.0.8Windows Server 2016 UserID Agent Servers x2 I've tried following this guide and numerous others (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0) Keep getting 'Failed to validate client certificate, thread : 1 , 5-10054!' as shown at the very bottom of the aforementioned...

Prisma Cloud Certification

Is there anything available to get free discount vouchers or any link to register to get updates on upcoming offers on certification of Prisma cloud (for partners and customers).

How to find active high bandwidth user

If a Palo Alto firewall is experiencing high throughput, what's the best way to find the source user/IP while the high throughput is occurring?We have all of our security policies set to log on session end, so that traffic log wouldn't help since the session would still be open.The Session Browser kind of helps, but the inability to filter for t...

jambulo by • L4 Transporter
  • 11891 Views
  • 4 replies
  • 0 Likes

Custom report emails blank??

I have 4 custom reports that if I 'run now' they display relevant information. But once I put them in a group and scheduled them to email/run everynight they come through blank with the message 'There is no PA-report-01 report on Sunday, Mar 18.' Under 'Report Groups' I had them selected under 'Custom Report' but changed to them 'Log view' ...

drewdown by • L4 Transporter
  • 11008 Views
  • 14 replies
  • 0 Likes

User-ID and Microsoft Entra ID Internal

We recently setup our CIE to work with our Microsoft Entra ID so when on GlobalProtect, we can track users and their traffic. We are now looking for solutions for a similar setup for internal users (not on GlobalProtect but on network). We are trying to avoid using direct AD access since Entra ID is our source of truth. I have seen a few optio...

packet dropped no route for ip multicast

Hi Team, I have a multicast setup. I am able to see that the PIM neighbourship is completed and igmp membership also fine.I can see my traffic in multicast fib with the correct incoming and outgoing interfaces. but the multicast packet is not reaching receiver, I can see a lot of packet drop in counter with detail "packet dropped no route for ip...

Any big issues with preferred release 10.2.10-h9?

Hello. We're preparing to upgrade ~20 firewalls (mix of 800-series and some VM series) to 10.2.10-h9 to address CVE-2024-0012. Wondering if anyone is running 10.2.10-h9 now and how things are working? Any issues with Global Protect? We're heavy users of it. Curious about "PAN-259769 GlobalProtect portal is not accessible via a web browser and th...

cmonte29 by • L1 Bithead
  • 2593 Views
  • 1 replies
  • 0 Likes

Secondary FW not sending alerts

Hello, I have a pa 450 HA set up. I configured alerts to send an email anytime an administrator logs in or a change is committed. But these are only sending from the primary firewall; if I log into the secondary FW no alerts are sent. Is there a way to configure the secondary firewall to also send alerts for logins and commits?

xmlapi: query not available

Hi everyone, I'm trying to get the Prisma Remote Network details via an API call.From the Panorama webgui debug page, I'm able to do this... like you see here: that red line has all the information I want with via an API call,so I tried:wget --no-check-certificate -qO- 'https://<panorama-ip>/api/?type=op&cmd=<request><plug...

DieterV2_1-1607433437133.png
DieterV2 by • L1 Bithead
  • 4435 Views
  • 3 replies
  • 0 Likes
  • 24469 Posts
  • 125 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks