General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 288 Views
  • 0 replies
  • 2 Likes

Skype for Business - Send files

Hi,

 

Having some issues with Skype for Business and file sending. When i have SSL Decryption on, I cant recieve or send files over SfB (Works when I turn it off).

Does someone know what URL`s i should add to the "NoDecrypt" url list to make it work?

JoneSkj by L1 Bithead
  • 2489 Views
  • 4 replies
  • 0 Likes

Resolved! DHCP Clients Not Getting IP From ISP Router Thru VWIRE

Hi All,

 

I may be missing something but wanted to check with you all.  I have a network with a PA-200 (vwire) between a FIOS router and a Netgear Layer 2  switch.  I also have WAPs connected to the switch.  The FIOS router is providing DHCP address to

...

GlobalProtect & User-ID

Hello,

 

I am trying to find some information on how to configure GlobalProtect with User-ID but haven't been able to. What I am trying to do is to enforce a new policy where when some of the users, who have laptops that aren't joint to the enterprise

...

GlobalProtect HIP not identifying products.

Hi.

 

I have two different HA-pairs with GP VPN configured on them. I'm trying to get HIP to work on the client, but I'm running into issues.

 

First issue is there are a number of applications we're checking for including Dell Kace and Comodo AV Suite a

...

Group Mapping

 

Included Groups under Group Include list showing full LDAP distinguished name. Would someone be able to advise how to configure a firewall to display "DomainName\GroupName" instead? 

 

Thank you

Marek

 

 

 

Resolved! Upgrade to PAN-OS 8.0.1

Hi everyone,

I Iam about to take the plunge and update from 7.1.7 to 8.1

I have read a few of the guides out there such as :

8.0 upgrade/downgrade considerations

PAN‐OS® 8.0 Release Notes

 

My questions I have are 

1. Do I need to upgrade the global protect

...

Resolved! Authentication seems to be the most difficult task....

No matter how many articles I read or follow I can never get the authentication to work for LDAP. I create the LDAP server profile, create the Auth Profile, then the Auth Seq, add the user account to admins and assign the profile to that user and it

...

AD group.PNG
Auth_Profile.PNG
seq.PNG

Resolved! Panos 8 inbound ssl inspection

Hi

 

I have tried to turn this on and well...

 

My server site has server cert and 1 intermediary cert.

With decryption on it strips the int-ca from the reply ? I find that rather strange why it would do that.

So this makes any request to that site fail

 

 

 

Syslog-ng issue

I have a Kiwi Syslog-ng server reachable from Palo Alto Firewall MGMT interfaces. I generated a Self-signed Cert on PA Firewall and imported that into Windows' store for use in Secure TCP (SSL) communication in kiwi Syslog Server....but the firewall

...

Activate logging

Hi,
I can't view in my Kiwi Syslog the traffic from my outside interface.
In my PA-500 I've enabled SNMP in Device -> Management ->Management Interface Settings -> Permitted SNMP Service.
In Operations -> SNMP Setup -> activeted Use Event-Specific Trap

...

s_quasar by L3 Networker
  • 2721 Views
  • 7 replies
  • 0 Likes

Resolved! Question about Virtual Router and Policy Based Routing

Hi All,

 

We are currently doing the migration from ASA 5550 to PA5020. We have totals of 4 interface in our environment.

 

In ASA the routing is handle by Static route and pretty straight forward.

 

As for Palo Alto, should I combine all the static route

...

PaloAltoRouting.PNG
  • 23644 Posts
  • 107 Subscriptions
Top Liked Authors
Labels