General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4127 Views
  • 0 replies
  • 0 Likes

Resolved! Not synched

My HA pair don't show synched and when I do a manual synched it say it completed successfully but the GUI show otherwise

HA.PNG
jdprovine by L4 Transporter
  • 6880 Views
  • 9 replies
  • 0 Likes

Resolved! MineMeld to trigger PA EDL Refresh if indicators change on update.

I’m interested in whether MineMeld can, or should, be used to trigger a PA EDL refresh if the indicators for a feed were changed after an update? Has anyone seen this done before? I’m curious whether this would be a recommended solution or whether interfacing with a PA’s API should be left to another scripting platform? If it is appropriate ...

PA-User by L1 Bithead
  • 5013 Views
  • 1 replies
  • 0 Likes

Drive-by Downloads & Block-Continue Page Exceptions

Hi all, In my environment, some developers use NuGet in Visual Studio, and in certain cases, commands will call out and download PowerShell scripts.Obviously I want generally to block PowerShell script downloads, but in special cases I need to allow them when they come from specific places. Unfortunately for my devs, since we wholesale block .ps...

Global Protect still lacks detail reporting feature

Greetings, So, I have a ticket open with support requesting on detailed reporting as seen on Network --> Global Protect --> Gateways --> Remote user link --> remote user tab, but on a cumulative basis instead of just data from the last login session. I searched around and found two links:https://live.paloaltonetworks.com/t5/Managemen...

vtan by L1 Bithead
  • 2347 Views
  • 2 replies
  • 0 Likes

Custom Region

Has anyone created a custon region and later found out that there was alrady a built in region for that country? How did you deal with it?

jdprovine by L4 Transporter
  • 15680 Views
  • 51 replies
  • 0 Likes

Resolved! Updating PA-200 7.0.x

Hello. Anyone had issues updating PA-200 on PAN-OS 7.0? Currently I'm on version 7.0.0. I downloaded PANOS 7.0.2 normally, but when I try to install I get the following message: "Failed to install 7.0.2 with the following errors. SW version is 7.0.2 Open of /opt/panrepo/releases/7.0.2/base/RPMS/openldap-clients-2.4.23-6.pan.mips.rpm failed: No s...

santonic by L6 Presenter
  • 5144 Views
  • 6 replies
  • 0 Likes

Resolved! PaloALto automatique update for threat prevention

Hello I need some help in an automatic update for the Threat Prevention.let me explain to you our design.We have the headquarter, and the branches, in one of this branches there is PaloAlto firewall, and this PaloAlto is not connected to the internet directly, there is a proxy internet in headquarter, then how I can configure my PaloAlto to see ...

Resolved! Live community attachments

I used to be able to upload attachments of logs to the Live community. I no longer see this option. I have tried in both chrome and safari. Does anyone have this problem?

PAN-OS Upgrade

Hi, I want to upgrade PAN OS version 7.0.5-h5 to 7.1.14, so what the versio steps , or can I directly install to 7.1.14?

Resolved! Logs to both Panorama in HA

Hi We have 2 M500 in HA. Lets call them M1 = normally active and M2 = normally passive.We have PA5000 series firewall and we manage it using the Panorama. We realised that the Firewall only sends the logs to M1 which is normally OK. But when we triggered a Panorama failover and M2 active, then the FW did not send logs to M2 but it stored the lo...

MineMeld - Invalid character for PaloAlto Import and List Length

Hi All, Two questions, One:A domain list we are trying to use has the following entry "streamillimité.com"As a test I manually added the list to the Palo UTM via a Custom URL Category and ran into the error "Invalid characters found in file".I am wondering if MineMeld can remove characters before generating the list, for use via a EDL? Two:The ...

Resolved! WildFire Submissions no logs

Hi All, PA-3050 PAN-OS 7.1.6 While checking WildFire configuration l have noticed strange thing where no logs display on the WildFire Submission or Data Filtering tab: When l test with the KB article below can observe that the test file is sent to the portal and verdict is assigned: https://live.paloaltonetworks.com/t5/Management-Articles/How-t...

WildFire no Submissions logs.PNG
Portal.PNG
CLI.PNG

DNS Sink Hole not working

8.0.4 I am trying to get SinkHole to work... Not having any luck, using a dns from the release notes of 2520-3016 nslookup gefndb.com returns the real address All looks correct, just does not seem to work ----------------------------------------------------- set rulebase security rules "Rule 1" from TRUSTset rulebase security rules "Rule 1" to U...

Do I need Logging Turned on on TAP security rule?

I am implementing a tap interface to listen to our internal network traffic. I don't want all the non THREAT traffic loged, if I turn of loggin in the security rule will the threats still go to the threat log? (I am presently listening only on a very quiet interface which has generated only one "informational" alert in 24hrs. Thanks Robin

Determining if PAN might be introducing Skype video problems

Skype video calls are often described as choppy. The sysadmins who admin skype for business onlineare point the finger at the PAN 5060. It is not configured for QoS but it's only processing 600Mbpstops and typically around 400Mbps. What might be some means to rule-in, rule-out the PAN? Thank you.

  • 24336 Posts
  • 124 Subscriptions
Labels