General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! System crash leaves stagnant pidfile

In my setup if I have a os/system crash, it leaves behind a stagnant pidfile. This makes sense. However on startup minemeld is set up to start at boot/runlevel 3 or whatever run level. It seems the stagnant pidfile does not in fact get cleaned up so

...

chirss by L3 Networker
  • 2679 Views
  • 5 replies
  • 0 Likes

Resolved! Azure s2s between PA keeps restarting after 5min

Hello,

 

i couldn't find answer to this anywhere even thought i found similiar problems. I followed this guide on how to set up vpn between Azure cloud and PA device: https://live.paloaltonetworks.com/t5/Integration-Articles/Configuring-IKEv2-VPN-for-M

...

Janusz by L1 Bithead
  • 4783 Views
  • 10 replies
  • 0 Likes

Palo Alto not booting

I've got a PA-2050 which is having issues with booting up. Worst is that I've got no support on this device.

 

This is how it looks like when it boots up:

 

Welcome to the PanOS Bootloader. U-Boot 4.1.14.0-0 (Build time: May 30 2013 - 16:56:05) BIST che...

shyamraj by L1 Bithead
  • 5182 Views
  • 5 replies
  • 0 Likes

Resolved! some help needed with CLI show command

Hello

 

I'd like to copy my config to file.

So I connected by PuttySSH, changed  Session>Logging to file to Printable output

Logged and lunched:

set cli config-output-format set

configure

show

 

but in every 40 lines add "lines 1-40" next "lines 41-80" "lines

...

_slv_ by L4 Transporter
  • 2252 Views
  • 2 replies
  • 0 Likes

New Global Protect 3.0 is not good enough

I was looking forwad to the 'new and improved' Global Protect. 

 

I am still very dissapointed at how it works from a UI standpoint. 

 

When I am connected to the VPN how do I disconnect? Is there a button hiding around in this awful GUI? The only wa

...

OrN8ikM.png
original.png
pmc by L2 Linker
  • 13064 Views
  • 41 replies
  • 14 Likes

Configuring a Zone Without Interfaces

It is possible to configure a zone without any interfaces specified? 
Will the rule containing this zone be applied ?

Will traffic that match this rule be accepted from any source and destination interface? 

shaunyt by L0 Member
  • 1841 Views
  • 4 replies
  • 0 Likes

SSL Inbound Inspection and SNI

Hello,
I need to implement SSL Inbound Inspection for protect my web server. I have PAN OS 6.1x

I have two question:

1) I have many websites behind same public ip, because I use SNI on my web server. How how can I do on the PAN ?

2) I see thath PAN decry...

Turn off logging when high load on data plane

I think I read something that said you can configure the PA to shut off logging if the dataplane was running a very high percentage of load and I would also like to be sent an alert if anyone has any information on this process.

jdprovine by L4 Transporter
  • 4369 Views
  • 6 replies
  • 0 Likes

Resolved! Reloading Config: Internal Server Error

So I just installed minemeld this morning so bare with me as I don't really have everything down yet. The issue that I currently ran into is that when I go under the Config tab I immediately receive an "Error Reloading Config: Internal Server Error"

...

BPry by Cyber Elite
  • 11728 Views
  • 11 replies
  • 0 Likes

Resolved! PANOS HA A/A; catch east/west traffic of multiple vlans

Hi community,

See attached visio.

And supplied notes.

 

There is no reason this won't work ?

 

The reason for this is to,

- Capture east/west 'inter-vlan' traffic that would normally be routed by L3 switch carrying SVIs, aka move the 'SVIs' up to the PAN. 

...

PAN deployment.png
mpgioia by L3 Networker
  • 1166 Views
  • 2 replies
  • 0 Likes

MineMeld in HA

Does MineMeld come with any kind of HA facilities? Do you see any issues or can share any gotchas for puting a couple of instances with the same config behind a load ballencer? 

GlobalProtect support for Mac OS Sierra

Does anyone have any experience of using the GlobalProtect agent on the latest Mac OS version 10.12? It's not listed in the supported clients but am hoping it will work nonetheless. This is the version in which Apple have dropped PPTP support, so we'

...

Top Solution Authors
Top Liked Authors