General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience. Visit our blog to learn more.

General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 496 Views
  • 0 replies
  • 2 Likes

ALG (Application Layer Gateway) and Oracle

Hi,

 

I've an application who has to query an Oracle database to get information from it. There is a PaloAlto firewall between my application and the DB. 

I actually reach the database, but I can't collect the information that I need. Making a quick tcp

...

Block Cyberghost IPs

I see a lot of threat (thousands in a few minutes) to one of my webservers from IP 176.10.115.140.

This IP belongs to cyberghost, so probably someone used this to hide his own IP and attack our webserver.

Is there a way to block this traffic (before th

...

Sjoerd by L2 Linker
  • 3214 Views
  • 2 replies
  • 0 Likes

Archive of Release Notes for Dynamic Updates?

Hi all,

 

Is there an archive of release notes for dyanmic updates?  I've just discovered that a firewall I inherited has a very old version of the Application version.  I'd like to determine just how old it is (so I know how much chaos I'm going to ca

...

Resolved! WOL and two subinterfaces - problem

Hello

 

I have two subinterfaces ethernet1/4.10 (192.168.1.0/24) and ethernet 1/4.20 (192.168.20.0/24) in the same security zone.

 

What I need to set up to allow to wake up computers using Wake On Lan function on 192.168.20.0/24 from ie. 192.168.1.100 ?

...

_slv_ by L4 Transporter
  • 8100 Views
  • 10 replies
  • 0 Likes

Create a rule

Hi,

is there a way to create a rule like this?

if

( session_end_reason eq aged-out ) and ( zone.dst eq SERVER ) and ( app eq incomplete ) and ( rule eq MY OUTSIDE RULE ) and ( bytes eq 308 )

block the IP for 300 seconds

s_quasar by L3 Networker
  • 2201 Views
  • 3 replies
  • 0 Likes

Resolved! Global Protect Agent Compatability

This is probably a relatively simple question and I think I know the answer but would like to confirm with the wider community.

 

We currently have Global Protect Client 3.1.1 active on our Firewalls. We are looking to go up to the 4.0.x branch of the

...

Panorama License Upgrade

I am currently running Panorama with a 25 device license limit, and I have purchased and need to upgrade to the 100 device limit. It seems the auth code for the 100 licenses is the same as the auth code for the 25 licenses.

When I go to Panorama, Lice

...

Resolved! Palo stops identifying users in traffic logs

Hi, 

 

we realized that Palo Alto suddenly stops identifying users. We can see an example in this traffic logs.

 

In this screenshot, we see how the user is being identified but there are connectiosn where its not appearing.

 

sometime running show user ip

...

Screenshot1.JPG

customize widgets of the GUI

Hello everybody,

 

one of my customers wanted to expand the size of certain widget. for instance , system log panel, since they don't see the GUI at any time everyday. some of logs would be missed.

do we have a way to expand the widget's size and have i

...

DannyDai by L1 Bithead
  • 1836 Views
  • 1 replies
  • 0 Likes

license transfer failed, device now stuck

Hey out there

 

I have had a failed attempt at transferring a license to a spare device. 

 

The original device is still listed, with its licenses in tact under "devices", however the spare device no longer shows up in the "spares" list, it is in the dev

...

Resolved! How to settings NAT and Application Override?

Hi all.

 

How do I settings NAT and Application Override?

 

PC-A  :201.xx.xx.182

  |

Palo  :210.xx.xx.168

          :210.xx.xx.169 -> 192.168.1.10   and TcpTimeout 4000ms

          :192.168.1.1

  |

Server-A  :192.168.1.10

 

Set Policy is

  Allow From 201.xx.xx.18

...

awawa100 by L2 Linker
  • 3057 Views
  • 3 replies
  • 0 Likes

Resolved! Access during lunch time

Good morning,

 

i wish know if it's possible to allow a websites during a period of time ( example between 12:00 & 14:00 PM) and then reblock the access?

 

 

Thanks in advance for your Reply

 

 

Esteban.

  • 23718 Posts
  • 110 Subscriptions
Top Solution Authors
Labels