This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! How many IPSEC VPN peers can PA-5220 handle ?

Hi All, We are having a scenario where we are supporting various vendors through IPSEC VPN and we were using Cisco ASA 5585-X for that.The problem is we are nearing the 4000 total active tunnels now and ASA is facing some issues handling that much tunnels, so we are thinking to migrate these tunnels to PA-5220.Now when I reffered to the data she...

Resolved! Policy Based Forwarding

Hello, i want to use policy based forwarding to forward all Traffic out via a specific next hop except private address ranges, When i negate the private address spaces the rule just shows these lined through, so it will not policy base route for these, it does not show ANY though without a line? I have shown this in attached screenshot. is t...

PBF.jpg

Resolved! Plz urgent help in Bridge+Tap mode

HelloI just need a confirmation if i can configure a TAP interface + 2 bridges interfaces, and make 2 policy rules, one for TAP and the second for the bridge, in order to generate logs for TAP and bridge traffic at once, that is possible? Thanks

Resolved! Creating a duplicate network?

Hi folks, I am being asked to create a duplicate network that will service VM clones of production VMs for testing and development purposes (without changing their IP or anything else). We have something similar at a different site using "transit" zones and individual NAT rules (that I did not configure), but this task is a bit different from t...

replica_diagram.jpg
OMatlock by • L4 Transporter
  • 3906 Views
  • 3 replies
  • 0 Likes

Resolved! Global protect high availability

Hi Techie, Am deploying global protect in 4 different region, based on regions they will be getting connected to appropriate portal. if the appropriate location portal is down then they have to come to DC portal, how do i achieve it ? FYI, Am using prelogon based authentication and i have machine certificate verification for the identity check o...

HELP - Computers with two network adapters

Hello, I have a network with a few computers with two network adapters NIC1 to the main netwrok 1.1.0.0/16NIC2 to the backup network 1.2.0.0/16 We are detecting the lost of connection every few minutes. It's necesary any special configuration to allow this arquitecture? Thanks

m.molina by • L1 Bithead
  • 3080 Views
  • 2 replies
  • 0 Likes

Resolved! Incorrect QoS Configuration Caused Network Traffic Outage

Quick design question Community. The setup is a core switch that terminates a Palo Alto for WAN and then a private circuit for internal resources back to a core in a different location. In the event they lose the WAN circuit, I need to route all the internet bound traffic back through the private circuit. I was going to treat it like a Dual ISP ...

Blocking access to Consumer gmail accounts, but allow Google Apps

According to Google, the only way to block access to consumer gmail accounts, is to intercept the traffic, and insert a HTTP header for all traffic going to google.com. Obviously PAN-OS can perform SSL inspection, but can it do the HTTP header insertion? Here's Google's page on this: https://support.google.com/a/answer/1668854?hl=en

Configuration Migration

Hello to all and sorry if this has been posted before. We are new to Palo Alto Networks Firewall. We are in the process of procurring and installing our first PAN device. With that in mind we do have quite a bit of experience with Cisco ASA FW but none currently with PAN FW. With that in mind we don't know how much time would be involved with mi...

amedley by • L0 Member
  • 9238 Views
  • 8 replies
  • 0 Likes

Resolved! Behavior Palo alto user id agent whit new update in windows Server 2012 R2 2018-03 Security Update

Dear community, I must update our windows server 2012 whit a update in order to resolv a vulnerability whit adobe flash palyer: windows Server 2012 R2 2018-03 Security Update for Adobe Flash Player for Windows Server 2012 for x64-based Systems (KB4088785) Is there any known issue whit this update and agent id of PaloAlto?? RegardsRuben

Resolved! Most common design with Cisco Networking?

Hi Folks, We currently use our PA 3020 firewalls with Layer 3 interfaces, Internet plugin directly, and doing all the routing for our network. Learned routing from L3 interfaces and manual static route entry. No routing protocols at all. We have old HP switches downstream, all Layer 2 function, and HP servers beyond that. We are getting ready...

OMatlock by • L4 Transporter
  • 6572 Views
  • 5 replies
  • 0 Likes
  • 24404 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks