This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! HA Firewall Device Migration/Hardware Swap

Need to replace an HA pair of Panorama managed, currently deployed firewalls (PA-5220s) with a different pair of Panorama managed firewalls (also PA-5220s), with minimum/no downtime; device licensing is different between #1 & #2 pairs, necessitating the swap. Proposed procedure (detailed in attached picture)- Copy Panorama DG/Template for H...

Resolved! Remote VPN gateway - IKE intitiator drop on Palo FW

Hi all, so a weird issue.. i have a pa1410 with multiple VPNs all working happy days. I have one client with a linux software based FW (cant recall fw vendor) we are using same ike/ipsec settings both ends all is good.. if i initiate vpn (test vpn ike-sa gateway xxxx) from Palo side, the VPN comes up and all is working.. however if client initi...

PA_nts by • L4 Transporter
  • 3339 Views
  • 6 replies
  • 0 Likes

Bad support from plaoalto

Bad support from plaoalto we have in customer support call center more then a hour to connect for P1 call its really surprise support from paloalto

mojeebk by • L0 Member
  • 15239 Views
  • 17 replies
  • 1 Likes

Activate Firewall with Expired License / Unknown Auth Code

I have a PA-440 on the shelf and want to make it a LAB unit. The support for the serial number expired on 12/15/2023. The device runs perfectly. I believe the original VAR is out of business. I tried my current VAR and was told the device was not registered. Is there anything I can do? I registered the device under my company's name, but the aut...

shobeav by • L0 Member
  • 3516 Views
  • 6 replies
  • 0 Likes

Black Screen Issue When Accessing GlobalProtect VPN

Hi everyone, Black screen issues are preventing me from using the GlobalProtect VPN client properly. Every time I launch the application and try to log in, the screen goes completely black, and I can’t interact with any options. I’ve already tried restarting my computer, reinstalling the client, and ensuring I have the latest version of Gl...

Resolved! How to show connected remote users with Panaroma

Hello directly at gateway you can show connected globalprotect users. Network - GlobalProtrect - Gateways - Info - Remote Users With Panorama you don't see the information about remote users. By the way - max user is in both views empty Using Panorama 10.1.7 Any idea how to see remote users with panorama?

kuschg by • L0 Member
  • 3954 Views
  • 2 replies
  • 0 Likes

Admin Role-based can't view log in Panorama after upgrading to 11.1.5-h1

Hi, normally we manage Panorama with 2 different accounts (one super admin and one Admin Role-based). Before upgrading to 11.1.5 h1, both account can view traffic logs normally. However, after the upgrade, the admin role-based account can't view any log while the super admin still can. Is it because of some change in 11.1.5 h1

KhoaDang by • L1 Bithead
  • 1157 Views
  • 1 replies
  • 0 Likes

IOT software not showing on new Palo's

I have deployed 6 new firewalls and 4 of the 6 are showing the IOT software on the devices But 2 of the Palos are not showing this and it has been over 24 hrs.. All of the devices have the IOT licence applied Why is this not being pulled to the dynamics updates on 2 of the Palo's?

MAllen_0-1732789239834.png
MAllen_1-1732789288733.png
MAllen_2-1732789338278.png
M.Allen by • L2 Linker
  • 966 Views
  • 1 replies
  • 0 Likes

Testing the quality of the main link

Hello, The ISP had a failure on its side, which involved slow connection, which made it difficult for people inside the company and those working on VPN to work. We have a backup connection that switches in the event of a failure of the main connection. Is it possible to introduce a mechanism that tests the throughput of the main connection and,...

Route convergence when using a Redistribution Profile

This is my scenario. I have an eBGP relationship from my PA to Vendor A and Vendor B. I have users that traverse this firewall and use their respective applications. I have Vendor C which is a site-to-site vpn. I'm doing a routed vpn with this vendor and I have static routes for Vendor C going across the tunnel interface. The issue I am hav...

Resolved! Panorama: how to manage Security/NAT policies

This is something we're struggling with. How do you write Security Policies and NAT Policies in Panorama when each firewall uses different IPs for NAT and the Security Policies include the IPs in them?On our FreeBSD firewalls, this was easy. We just used generic variables in our rules scripts such that the rules were the same across all the fire...

fjwcash by • L4 Transporter
  • 9185 Views
  • 6 replies
  • 0 Likes

Pan_task always at 100 % is it due to MP or DP?

we have PA 220 running 9.0.4 show system resources shows show system resourcestop - 09:53:13 up 2 days, 12:46, 1 user, load average: 2.11, 2.28, 2.35Tasks: 139 total, 5 running, 134 sleeping, 0 stopped, 0 zombie%Cpu(s): 59.4 us, 10.4 sy, 1.4 ni, 28.7 id, 0.1 wa, 0.0 hi, 0.0 si, 0.0 stKiB Mem : 4119652 total, 373012 free, 2303588 used, 1443052 b...

MP18 by • Cyber Elite
  • 15953 Views
  • 8 replies
  • 0 Likes

BGP: route not installed when using import rules

In a BGP configuration, we properly receive the default route from the ISP and it´s installed in the routing table. As long as we add a import rule the route isn´t installed anymore. The import rule is very simple and we don´t know where can be the issue.      Thank you in advance!

Import_rule_1.png
Import_rule_2.png
Import_rule_3.png
Import_rule_4.png
Carracido by • L4 Transporter
  • 1594 Views
  • 2 replies
  • 0 Likes
  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks