This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Determining failed administrator interface logons from syslog

Hello!I'm running into an issue. I would like to record failed logons to the administrator interface via syslog but the log format and contents of the logs appear to be exactly the same as those when a user performs a failed login to GlobalProtect Client VPN. Therefore I am getting a bunch of false positives.Has anyone had any luck with this?

Jimkoo by • L0 Member
  • 2378 Views
  • 1 replies
  • 0 Likes

Traffic in interface tunnel

Hi, I have enabled QoS in order to limit a tunnel interface to maximum badwith to 50Mbps. QoS is well-applied but the current BW value is not being showed in QoS statistics. What ways are there to know the amount of traffic that goes in a moment through this tunnel to know if it exceeds 50MB??????? Except QoS statistics.....

Resolved! syslog forwarding

how can i forward exact below information to Syslog server ? > show log userid1,2013/03/28 12:53:05,001701000225,USERID,login,12,2013/03/28 12:53:05,vsys1,172.17.128.92,plano2008r2\administrator,test,0,1,2700,0,0,active-directory,unknown,1,0x01,2013/03/28 12:53:05,001701000225,USERID,login,12,2013/03/28 12:53:05,vsys1,172.17.128.92,plano2008r...

Resolved! HA Active/Passive upgrade question

Hey PA Guru's! I have a question I haven't really seen on the KB's and documentation on HA upgrades, and wanted to get some insight. I currently have a pair of PA-3050's we're looking to upgrade, and i've reviewed the docs on the recommended procedures here: https://www.paloaltonetworks.com/documentation/80/pan-os/newfeaturesguide/upgrade-to-...

Power failure on PA-7000

The PA-7000 Hardware Guide specifies they minimum number of active PS to provide enough power for a chassis depending on the type of power and number of NPCs installed.For example, if the PA-7050 chassis is powered via 120V AC and has 6 NPCs installed it requires at least 3 PS functioning to provide full functionality. So, if the chassis is powe...

MS-ISAC Soltra Feed?

Through MS-ISAC we are able to consume a Taxii feed (I believe it originates as a Soltra Edge feed). Currently this is going straight into my palo as an EDL. I would like to bring it in through minemeld so I can add other feeds and take advantage of the other features in MineMeld. When I look at prototypes for Miners, I don't see any that r...

kevink by • L0 Member
  • 8114 Views
  • 4 replies
  • 1 Likes

Panorama VM in HA and log forwarding via syslog

Panorama VM in HA setup and panorama mode Panorama A: primary-activePanorama B: secondary-passive Both have a local log collector and both are added to "default" log collector group. In this log collector group, log forwarding via syslog is configured. The firewalls are configured to log to Panorama A and Panorama B. This works fine, logs are fo...

Anon1 by • L4 Transporter
  • 2332 Views
  • 1 replies
  • 0 Likes

GlobalProtect on new MAC pc

Hello, We have installed the Global Protect software (version 4.0.5-8) on a new MAC computer (High Sierra version 10.13.3). However the Connect button is greyed out along with a number of other buttons. The only available buttons are Show Panel / About / Help / Welcome Page / Notifications and Collect Logs.If I open the panel it has the correct ...

Farzana by • L4 Transporter
  • 2319 Views
  • 2 replies
  • 0 Likes

OS upgrade rollback from 7

I am currently on version 6.1.10 and when I upgraded to it in March I was told by TAC that is was currently the most stable version. I am looking at what it would take to move up to the most stable version of 7 but first I want to figure out the best way to roll back the upgrade should it not go well, I am assuming its not as easy as re-installi...

jdprovine by • L4 Transporter
  • 4406 Views
  • 5 replies
  • 0 Likes

Resolved! How many firewalls justify Panorama

Curious to see if there's some group concensus on how many firewalls an organization needs to have before the cost of Panorama is justified? Right now we have two H.A. pairs (four total) and im not sure Panorama would make life that much easier. Thanks for your input.

fmurray by • L1 Bithead
  • 9342 Views
  • 7 replies
  • 1 Likes

Fiber Connectivity For PA-850

Hello, we are going to connect our PA-850 firewalls with FortiGate-300D firewalls via multi-mode fiber cables and will most likely be using PAN-SFP-SX for the cable connectivity. 1) I see that the specification sheet mentions only OM2 multi-mode fiber cables but OM3 is typically used nowadays. Can OM3 multi-mode fiber cables be used in our scena...

poolnet by • L0 Member
  • 3286 Views
  • 2 replies
  • 0 Likes

PA220 PANOS 8.0.7 Dual ISP

Hello Everyone I know there is a fair amount of information on this topic but I have a few issues/questions I have a PA220 with PANOS 8,0,7. My questions are relating to dual ISP connectivity. I would like to setup my PA with a backup ISP connection. I do have IPsec tunnels. But I am allowing for the second tunnel to negotiate when the backup IS...

Resolved! VSYS with Shared Gateway and Existing Global Protect

We have a 3050 with one VSYS and is connected to an ISP with one IP address as we also use this VSYS for user VPN (Global Protect). All is working fine but we will be adding another VSYS to segregate another department’s Internet traffic. I would like both VSYS to share the same Internet and IP but I’m concerned if I read correctly about our exi...

  • 24446 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks