This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Can not block x-vpn on port 80

Please can we have some assistance with blocking x-vpn. We currently have Decryption enabled DNS proxy enabled The threats are set to reset/drop/block in screenshots Despite all of this, the HTTP-2 connection method in x-vpn successfully establishes a connection by obfuscating as random allowed sites such as www.office.com [office.com], www...

Salathiwe by • L3 Networker
  • 1493 Views
  • 1 replies
  • 0 Likes

User-ID Connection Security Won't Work

UserID Agent version 9.0.5-8Firewall 9.0.8Windows Server 2016 UserID Agent Servers x2 I've tried following this guide and numerous others (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0) Keep getting 'Failed to validate client certificate, thread : 1 , 5-10054!' as shown at the very bottom of the aforementioned...

Prisma Cloud Certification

Is there anything available to get free discount vouchers or any link to register to get updates on upcoming offers on certification of Prisma cloud (for partners and customers).

How to find active high bandwidth user

If a Palo Alto firewall is experiencing high throughput, what's the best way to find the source user/IP while the high throughput is occurring?We have all of our security policies set to log on session end, so that traffic log wouldn't help since the session would still be open.The Session Browser kind of helps, but the inability to filter for t...

jambulo by • L4 Transporter
  • 11995 Views
  • 4 replies
  • 0 Likes

Custom report emails blank??

I have 4 custom reports that if I 'run now' they display relevant information. But once I put them in a group and scheduled them to email/run everynight they come through blank with the message 'There is no PA-report-01 report on Sunday, Mar 18.' Under 'Report Groups' I had them selected under 'Custom Report' but changed to them 'Log view' ...

drewdown by • L4 Transporter
  • 11106 Views
  • 14 replies
  • 0 Likes

User-ID and Microsoft Entra ID Internal

We recently setup our CIE to work with our Microsoft Entra ID so when on GlobalProtect, we can track users and their traffic. We are now looking for solutions for a similar setup for internal users (not on GlobalProtect but on network). We are trying to avoid using direct AD access since Entra ID is our source of truth. I have seen a few optio...

packet dropped no route for ip multicast

Hi Team, I have a multicast setup. I am able to see that the PIM neighbourship is completed and igmp membership also fine.I can see my traffic in multicast fib with the correct incoming and outgoing interfaces. but the multicast packet is not reaching receiver, I can see a lot of packet drop in counter with detail "packet dropped no route for ip...

Any big issues with preferred release 10.2.10-h9?

Hello. We're preparing to upgrade ~20 firewalls (mix of 800-series and some VM series) to 10.2.10-h9 to address CVE-2024-0012. Wondering if anyone is running 10.2.10-h9 now and how things are working? Any issues with Global Protect? We're heavy users of it. Curious about "PAN-259769 GlobalProtect portal is not accessible via a web browser and th...

cmonte29 by • L1 Bithead
  • 2618 Views
  • 1 replies
  • 0 Likes

Secondary FW not sending alerts

Hello, I have a pa 450 HA set up. I configured alerts to send an email anytime an administrator logs in or a change is committed. But these are only sending from the primary firewall; if I log into the secondary FW no alerts are sent. Is there a way to configure the secondary firewall to also send alerts for logins and commits?

xmlapi: query not available

Hi everyone, I'm trying to get the Prisma Remote Network details via an API call.From the Panorama webgui debug page, I'm able to do this... like you see here: that red line has all the information I want with via an API call,so I tried:wget --no-check-certificate -qO- 'https://<panorama-ip>/api/?type=op&cmd=<request><plug...

DieterV2_1-1607433437133.png
DieterV2 by • L1 Bithead
  • 4470 Views
  • 3 replies
  • 0 Likes

Need assistance with PA-445: general setup/VR

Hello Everyone, I need a little assistance I am new to Palo Altos...I have just received and trying to set up an PA-445...but I ran into the following issues: - no incoming traffic hitting on anything (outbound traffic is OK: computers plugged into PA-445 on other ports can reach Internet) - I would like inside computer 192.168.0.57 to have tr...

Resolved! Downloaded Firmware from Active Firewall doesn't show up on Passive - PA-460

Hi, I have downloaded a software release from Active Firewall and already sync to HA Peer, but when we tried to upgrade Passive Firewall. The downloaded version doesn’t show up. I have also tried uploading the software release manually but it showed the software already exist. What else should I check on this? Thanks

Al-Zuhri by • L0 Member
  • 1998 Views
  • 2 replies
  • 0 Likes

Admin console unreachable/cant remote in or ping - PA support wont let you submit a ticket without a TSF file - which you get via admin console

Very frustrated with this - PA portal requires a TSF file to submit a ticket. We cant generate one, because our portal is unresponsive. Tried calling and going through telephone support and it redirects to portal support and hangs up. Anyone have a number to a real person?

Issue GP Linux - URL Browsers

Hi, I am experimenting a very strange behaviour with Global Protect when connecting to my work from my home. I am able to connect to the VPN of my work and even doing ssh to the server in the private network, but when I try to surf the web, the browser does not show anything. When I disconnect from the VPN, I am not able to connect to the serv...

BigPalo by • L4 Transporter
  • 3259 Views
  • 4 replies
  • 0 Likes
  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks