General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

O365 Category Change

Did anyone see outlook.office365.com change category today at about 18:00 GMT? We were seeing logged as computer-and-internet-info and changed to web-based-email? This is when I find out it ws planned and I've missed about a million alerts telling me this was coming....

apackard by L4 Transporter
  • 4078 Views
  • 4 replies
  • 0 Likes

How to block Spotify in Palo Alto

Hello world ! despite spotify being an awesome P2P solution for music, it has been a headache to HR management.So, we were asked to identify an way to block the usage of Spotify in our machines.What´s the way we should use in order to get it done in Palo Alto ?

evsivier by L0 Member
  • 5832 Views
  • 2 replies
  • 0 Likes

Resolved! Admin Roles

Hi I created a 'read only' admin role, simple superuser priviledges, everything set to default. when i login with RO, the HA view for example dissappears, and the commit link is still present desite it being disabled within the Admin Role profile. I'm wondering if this is because we're using ISE...? Many thanksAjaz NawazJNCIE-SEC No.254CCIE-RS N...

nawaza by L2 Linker
  • 3867 Views
  • 3 replies
  • 0 Likes

Resolved! Copy config from live PA820 to old PA500

We recently got a PA820 in live production and I'm concerned if we have a device failure that it may be difficult to take a saved config from the PA820 and import it into the old PA500. Does anyone have any experience with this? Is it even possible? How long would this take (guesstimate)? Thank you in advance!

Nickzzz by L1 Bithead
  • 5179 Views
  • 6 replies
  • 0 Likes

Resolved! Mindmeld Installation issues

Hey guys, having issues with fresh installs of Minemeld. I've had success installing it on a test virtual box however this time I'm deploying in a VMware environment. This is the message that I get. I've tried removing the packages for clean install and have tried other machines but all end with the same results. Any ideas?/opt/minemeld/engine/d...

vdnguy2 by L1 Bithead
  • 5353 Views
  • 3 replies
  • 0 Likes

PA-5020 factory defaults

Hello! I have 2 PA-5020 with 5.0 software and want to upgrade them to 8.0. One way to do this is to follow upgrade procedure. Configuration is very simple and can be deleted. Is it possible to upload 8.0 software using GUI, boot firewall in maintenance mode and reset it to factory defaults using 8.0? Or is is possible to use FTP in maintenance m...

mkopcic by L2 Linker
  • 2267 Views
  • 1 replies
  • 0 Likes

MTU Packet counter increases during packet capture

Hi Doing some analysis and whilst doing a packet capture I notice that flow_fwd_mtu_exceeded starts increasing rapidly. Any ideas? ThanksDavidshow counter global filter packet-filter yes flow_fwd_l3_ttl_zero 15996 0 drop flow forward Packets dropped: IP TTL reaches zeroflow_fwd_l3_noarp ...

OCSP responder question

When you generate a certificate for your login page on the Palo Alto and it is signed by a self signed CA... if you created an OCSP reponder should that responder be added to the certificate when you create that certificate for the Palo Alto login page? Thanks Andy

Resolved! Debug question (Debugs turned on)

Let's say different techs have applied debug commands in the past. Eg: Someone two weeks ago set the debug user-id on debug comand. Now he/she forgot to set the "debug user-id off" Is there a comand to see which debugs are turned on? Thanks. Luis

lestrada by L0 Member
  • 4238 Views
  • 2 replies
  • 0 Likes

Resolved! Activate a new GlobalProtect Client?

Hello folks, Another first for me this week. Before we upgrade our PANOS, I wanted to activate a new GlobalProtect client first. It says here that it will download new client when users connect. Is that true? Will it download and install (upgrade) on the client automatically?I was thinking it would just be made available on the Portal for down...

GPUpdate.jpg
OMatlock by L4 Transporter
  • 14868 Views
  • 8 replies
  • 0 Likes

Looking for advise, MFA or additional step for access to a server over RDP

I'm trying to add additional protection for users accessing resources on an isolated network. Is there any way that I can utilize our Palo Alto's to accomplish this scenario? We do use global protect and user-id mapping already, but as an example I would like John while on his laptop\pc that whenever he access lets call it ServerA over RDP that ...

zthiel by L2 Linker
  • 3486 Views
  • 4 replies
  • 0 Likes

Design suggestions

We are trying to implement SSL offload using proxy gor our hosted websites, so they can be inspected by firewalls. Management currently is more alligned to SSL offload by proxy rather than decryption by FW and it is working the way below. But with the cenario below they are also concerned about the password being revealed after SSL offload. How ...

image.png
raji_toor by L4 Transporter
  • 2875 Views
  • 3 replies
  • 0 Likes
  • 24395 Posts
  • 123 Subscriptions
Top Solution Authors
Labels