This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Design suggestions

We are trying to implement SSL offload using proxy gor our hosted websites, so they can be inspected by firewalls. Management currently is more alligned to SSL offload by proxy rather than decryption by FW and it is working the way below. But with the cenario below they are also concerned about the password being revealed after SSL offload. How ...

image.png
raji_toor by • L4 Transporter
  • 2875 Views
  • 3 replies
  • 0 Likes

Resolved! Multi hop DHCP relay

Hi So I want to get my VOIP phones to dhcp to the vPBX. Phone are on a vlan in the office vPBX is in the DC so vlan for phone -> PA -> vlan -> arista switch -> vlan -> PA (clustered A/A) -> vlan -> vPBX So I can setup DHCP relay on the first PA and I can set the DHCP server as being the ip of the vPBX, and I believe as it wi...

Exclude threat from alerting on IPS

How can I effectivly remove alerts for specific threats on our IPS tap? There are some that we are aware are actualy trivial and can't be fixed but cause a lot of alerts. Is simply adding it as an Exception on the Vulnerability Profile enough? I tried this and did get a number of alerts afterwards. Cheers Rob

Allow all shorteners

Good morning, Is it possible to allow all shorteners (bit.ly, goo.gl...). But only shorteners. There isnt any category for this.. Regards.

MineMeld not loading after installation

After succesfol installation of MineMeld in a Debian9, by using this article: https://github.com/PaloAltoNetworks/minemeld-ansible When accessing to HTTPS://IP_Address it stays forever loading (showing the loading "M"). I can't see any error in the logs, services are fine. Any ideas?

MarcelST by • L3 Networker
  • 3105 Views
  • 1 replies
  • 0 Likes

Virus/spware download blocked but no threat logs

Hi When users are accessing internal portal then they are getting "Virus/spware download blocked" on browser with file name (althrough they are not accessing this file) but there is no virus/spyware logs in threat monitor tab. Any pointers how to fix this?

nbar

Hi,What is the NBAR equivalents in pa- qos or how does it works in PA Thanks

simsim by • L4 Transporter
  • 6502 Views
  • 8 replies
  • 0 Likes

Resolved! After Factory Reset Cannot connect to management server

Hi,after i make a Factory Reset via Maintenance Mode with this HowTo -> https://live.paloaltonetworks.com/t5/Management-Articles/How-to-SSH-into-Maintenance-Mode/ta-p/59635 i cant connect via "www" to the management. My new IP is default 192.168.1.1 and i can ping it. when connect via ssh i login with admin:admin then i see the message "Syste...

IP Wildcard in custom report?

I have a custom report, I need to exclude 40 Instances of 192.168.x.100 to dest port (1234 or 1235) is there a short way to do this or am I faced with 40 repeating lines like this.... ( addr.src notin 192.168.10.100 and ((port.dst neq 1234) or (port.dst neq 1235)))and( addr.src notin 192.168.10.100 and ((port.dst neq 1234) or (port.dst neq 1235)...

Log forward without internal logging?

Should it be possible to LOG forward without having internal logging? Some stuff I need to be able to deal with on the firewall, but others I just want recorded long term. Seems to be no option to do it.

what NAT and Network config

Hi,I have a router from my carrier. This gives me an internal IP 10.0.9.3 /16 from my internal Network 10.0.0.0/16 network and the GW IP he gave me is 10.0.30.99.Now he makes natting so i could get internet access and there i have a static official ip adress. for example 123.456.789 My test pc give it the ip 10.0.9.3 subnet 255.255.0.0 and gw 10...

Resolved! Global protect domain based local breakout

Hi, I have a question regarding Global protect and partial split tunnelling. Does GP have an option to only allow specific domains via local breakout, all other traffic should be forwarded into the tunnel. I'm asking this question regarding 0365, all domains should pass our company security checks only O365 traffic should be allowed to use end-u...

Skype for Business not work if use SSL Decrypt

Hi, Is it possible to exclude Skype for Business application from SSL Decrypt? Custom No decrypt URL category is not an option because new clients with on-premises Skype instances coming constantly. brToni

ToniE by • L2 Linker
  • 7223 Views
  • 6 replies
  • 0 Likes
  • 24396 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks