General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1661 Views
  • 0 replies
  • 0 Likes

LAB SKU for PA-VM 10.1.0 License

I am interested in purchasing a LAB SKU license for my PA-VM 10.1.0 to use in my VMware environment for practice labs. Could you please provide information on the available options and pricing for a lab-specific license? 

 

Thank you for your assista

...

Resolved! PAT/NAT rule not working

Hi I am looking to create a PAT for an internal server which will use the /30 public IP of the Palo outside interface and port 16385 to be reachable. The below scenario:

 

PAT/static NAT towards the private IP of O-IntercomSRV-01 (the intercom server

...

MAllen_0-1721916847976.png
MAllen_1-1721916864575.png
MAllen_2-1721916898264.png
MAllen_3-1721916944923.png
M.Allen by L2 Linker
  • 2171 Views
  • 4 replies
  • 0 Likes

Resolved! TCP & UDP Floods from trusted zones

Hi everyone,

We receive TCP or UDP Flood threat logs from time to time on different firewalls of ours. In the image below you can see that the source and destination zones are the same, i.e. "zoneTrust", and this the case for all threat logs of this

...

Arman_Zaheri_0-1722255506276.png

App id

Hello,

I have a question about app id.

 

The App-ID description contains a Deny Action description of the action taken.

 

Whatever action is imposed by the security policy, the flow will follow the action of the App Id?

Sarou22 by L2 Linker
  • 1586 Views
  • 3 replies
  • 0 Likes

How to Deny or Drop Replies in Allowed UDP Sessions

Hi All,

I'm trying to address a hypothetical scenario where some solutions act only as listeners and do not need reply to the sender.
For example, a SIEM system listening on UDP port 514 does not reply to the log sender.

In such a case, we configure

...

Resolved! SYSTEM ALERT : medium : MLAV: Unknown error

Repeatedly receiving the above alert on 4 separate PA firewalls throughout the evening, can't find much information online relating to it. Has anyone else received this message before? If so, what steps should I take to troubleshoot and resolve the m

...

KirkH by L0 Member
  • 8050 Views
  • 15 replies
  • 6 Likes

Resolved! Application override

 

Hello,

Application Override to a custom application will force the firewall to bypass Content and Threat inspection

I've read several documents but I still don't understand the point of doing this. What's the point?

 

Thanks

Sarou22 by L2 Linker
  • 1624 Views
  • 3 replies
  • 0 Likes

Resolved! Single pass parallel processing

 

Hello, I don't understand why it is said that the single pass parallel processing performs operations once per packet.
What does this mean?

Firstly, the single-pass software performs operations once per package.

Thanks

Sarou22 by L2 Linker
  • 1768 Views
  • 3 replies
  • 0 Likes

Resolved! Palo alto candidate configuration vs running conf

 

Hello,

I don't understand the difference between candidate configuration and running configuration.

Before committing when I'm making changes it's the running configuration and when I commit it becomes candidate configuration?

Another question. I'v

...

Sarou22 by L2 Linker
  • 5148 Views
  • 2 replies
  • 0 Likes

Single pass parallel processing

Hello,

 

After Reading the documents, I still don't understand why WE Say thay the single pass software performs operations once per packet. "As a packet is processed, networking functions, policy lookup, application identification and decoding, and

...

Sarou22 by L2 Linker
  • 517 Views
  • 0 replies
  • 0 Likes

Tunnel Monitor - PAN-OS SDWAN

I've had an issue recently where randomly I've had members of my VPN mesh start to have the tunnel monitors going up and down constantly which causes BGP to never be able to establish with the peer since the static routes to the loopbacks are pulled

...

PA-220 disk space issues

As most with a PA-220 have experienced, regardless version running (currently latest 10.2.3-h2) root partition fills up all the time and have to run the disk-usage cleanup commands manually and tried enabling aggressive-cleaning as well, it just cont

...

  • 24215 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels