This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Setting-up Palo Alto Firewall without NAT Policy

Dear all,

 

I am a newbie and currently at the first phase to learn Palo Alto Firewall. I am setting-up a simple virtual network topology using VMWare Workstation as follows.

 

 

As you can see from the diagram, there are two zones which are labeled as Tr

...

Drawing1.png
hibagus by • L2 Linker
  • 2827 Views
  • 3 replies
  • 0 Likes

Resolved! Linux VPN connectivity to a PAN FW in FIPS Mode

Good morning. I have a situation where I have a bunch of linux clients that need to be able to VPN into an environment protected by a PAN Firewall in FIPS mode. With FIPS mode enabled on the firewall, the ability to use 3rd party vpn clients via the

...

wkintz by • L2 Linker
  • 1996 Views
  • 2 replies
  • 0 Likes

URL Filtering category “command-and-control” missing

Hello

 

I'd like to prepare for new category “command-and-control” I have two  firewalls one with BrightCloud and one with PA url filtering database. Both with 7.1.11 PANOS and latest url filtering database but when I try to change default action for t

...

2017-09-20_085752.png
_slv_ by • L4 Transporter
  • 2754 Views
  • 4 replies
  • 0 Likes

Mitel Border Gateway / Teleworker

Hi all,

I'm having a problem getting Mitel's Border Gateway (formerly known as Teleworker) working properly. For those not in the know... Mitel is a large VOIP phone system company and they have various addons, including a server which would typically

...

UKRB by • L3 Networker
  • 4969 Views
  • 5 replies
  • 1 Likes

Resolved! Upgrading 7.1 to 8.0: New Log Storage

Hi


We are upgrading to 8.0 and have noticed the cavet about new log storage in 8.0. We do not have log collectors setup, but are collecting logs in Panorama (threat and traffic only) and wonder if the existing log migration applies to these as well?

 

T

...

RSporbert by • L1 Bithead
  • 12289 Views
  • 14 replies
  • 0 Likes

Resolved! URL Filtering Eval License - how to remove?

Every day we get email alerts:
SYSTEM ALERT : critical : License for feature url-filtering expired on xxxx/xx/xx

How do you remove the URL Filtering evaluation license??

There is no option in the GUI to remove it.

I could see an option in the CLI to requ

...

moha by • L0 Member
  • 4470 Views
  • 3 replies
  • 0 Likes

Resolved! How to change a miner timeout

Hi all,

 

A simple question, I hope.  How do I change the default timeout for a certain miner - panos syslog miner in may case.

I'd like to change the timeout to be 30 days, rather then an hour or so that seems to be set now.  I could not find a way

...

update withdraw.png

Resolved! NAT rule to change internal IP to another on same subnet?

Hi folks,

 

I have created a internal zone IP address I want to use as generic for FTP communications 192.168.1.9.

I want to NAT this IP to our current FTP server 192.168.1.19.  This way when our FTP server changes we just change our NAT rule rather tha

...

OMatlock by • L4 Transporter
  • 5844 Views
  • 11 replies
  • 0 Likes

Script or custom report ?

Hi All

 

I’m new in the world of Palo Alto, the guy in charge of this just left our company so I’m doing his task until someone else arrive

 

One thing he had to do for audit purpose was to do a report for each palo Alto  with

 

Device state

HA Status

Softwa

...

Best way to integrate with panos?

There's ebl, edl, persistentdag, nonpersistentdag, etc. Limits on the number of feeds.

 

Does anyone have a concise summary of some kind which makes picking which one of these, or combination of these, is the best route to go for integrating with pan

...

chirss by • L3 Networker
  • 3096 Views
  • 1 replies
  • 0 Likes

Global VPN

Hi All,

 

Since IOS devices has issue in global vpn due to which it cannot access the DNS define in gateway when splittunneling is enabled.Due to which user cannot access certain URL so we added them in DNS suffiex , but if we want to define the domain

...

Himarya by • L1 Bithead
  • 1814 Views
  • 1 replies
  • 0 Likes

Migrating Site to Site VPNs to IKEv2 & Suite B Crypto

Dears,

 

I have multiple site to site VPN between my branches and most of them are terminated on PAN3020 and PAN-820.

I want to upgrade them all to IKEv2 and Suite B Cryptography.

 

What is the recommended IKE and IPSEC proposals when moving to IKEv2 and

...

Ammar by • L2 Linker
  • 2300 Views
  • 1 replies
  • 1 Likes

Resolved! Critical License Expiration

Hi! I have a PA-VM 300, and I've got the error message "Critical License Expiration" warning.

I can't seem to ping my fw interface from a directly connected host, though I have my MGT profile configured to allow ping to my internal interface.

 

I have r

...

LIC errors.png
  • 23591 Posts
  • 103 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks