General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4132 Views
  • 0 replies
  • 0 Likes

How to Migrate Panorama to a Different VM Server

HI, if you please i want to migrate Panorama which is managing around 50 FW from VM host to new VM hostif I exported the panorama machine in.OVA file and import this.OVA to the new host should it work? any license problem? any FW connectivity problems? Certificat issue?thank you

User-ID mapping

Hello. We have such kind of problem. This user has allowed privilege to visit this category and the other one, but PA very frequently identify it by ip, not the username (with User-ID). we use agentless client for mapping between PA and our AD.The problem happens very often with a small amount of users (for example exactly with this one). Maybe ...

1512392827715.png

Resolved! Unable to download 8.0.6 on PA500

Hello I'm preparing to migrate from 7.1 to 8.0 PANOS platform.I have 8.0.0 downloaded and 8.0.5. I see that 8.0.6 is available for download so I tryed to do thatUnfortunetelly with error:OperationDownload StatusCompleted ResultFailed DetailsSuccessfully downloadedPreloading into software managerError: Image File Authentication ErrorFailed to loa...

_slv_ by L4 Transporter
  • 8024 Views
  • 5 replies
  • 0 Likes

Web Authentication

On our juniper firewalls we are using web authentication to restrict access to certain hosts and I would like to know if this is possible and how to on PA. The user hits a captive portal(webauth in juniper) that is boudn to an interface:set interfaces reth0 unit xxxx family inet address x.x.x.x/24 web-authentication httpsThis presents a simple l...

r24481 by L1 Bithead
  • 2846 Views
  • 1 replies
  • 0 Likes

Case Management Site Unavailable 6:00-7:00 p.m. PT on 12/7 for Planned Salesforce Maintenance

Dear valued Palo Alto Networks customer, Please be advised that Salesforce will be performing necessary maintenance activity on Thursday, Dec. 7 from 6:00-7:00 p.m. PST and our Customer Support Portal’s (CSP) case management system will be inaccessible during this timeframe as a result of this planned maintenance. We apologize in advance fo...

Resolved! Hardware Migration PA-500 to PA-850

Hi,Planning for upgrading PA-500 to PA-850, Just wanted to be sure that if we download the current running config from PA-500 and import it to new PA-850 device, will that work? I am not sure if Importing configurations between non-matching hardware versions works in this case. Is there a way to do so or needs to be configured manually?

Resolved! Tunnel Monitoring for VPN between PA and ASA issues

I have read various articles but I am still not very clear on the tunnel monitoring, proxy Ids and the IP addresses on the tunnel and tunnel.1 interfaces I am supposed to be using. I aslo am not sure what I need the ASA to setup to help me get our VPN tunnel running and ready for failover. I tried to follow the configuration article "how to Con...

kopps by L0 Member
  • 4590 Views
  • 3 replies
  • 0 Likes

Problem installing PanOS Virtual Machine

I;ve downloaded the latest PanOS (both 7.1.14 and 8.0.6) OVA files. Verified the sha256 hash matches. When I go to create a VM under ESX 6.5 via the web interface, the vm creation hangs when trying to load the OVA content. No errors, it just sits there (i have let it run for over an hour). Since this is our first VM, I can't open a suport ti...

Resolved! Purpose and functions of VM Information Sources?

I trying to understand what gain we have from having our vCenter server monitored by our PA 3020 firewall?I reading about it here, but not understanding it.https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface-help/device/device-vm-information-sources We are recently upgraded to vSphere 6.5 and a new vCenter server that I need t...

PAvCenter1.jpg
OMatlock by L4 Transporter
  • 4739 Views
  • 3 replies
  • 0 Likes

Minemeld eth0 loses connectivity

Installed Minemeld on Ubuntu Trusty in ESXi with no issues; however, soemtimes when navigating within the Minemeld gui, I lose network connectivity. The only way to fix thus far is to ping the gateway from the console. Any ideas what I may have done wrong?

Resolved! Please provide Folders in GUI for clubbing policies

Please provide ability to create group or folders in GUI so that we can group or club inter-related policies. For eg. If I provision a new application and I need to create a few policies for that application, I can create a folder and create those policies in the folder. When I remove the application, I can delete the folder and all the related ...

monavy by L0 Member
  • 3565 Views
  • 3 replies
  • 0 Likes

Most secure way to validate laptop, desktop and mobile devices?

I'm new to networking in general and looking for the most secure way to ensure those joining our network actually belong on the network. We have a moderate hierarchy of users with a fairly even mix of desktops, laptops and mobile devices. What I'm looking to achieve:- Only specific devices are able to connect to network (whitelist specific, deny...

Newbie - Unable to Access Web GUI

A very good day to everyone, I hope everyone is doing Great, I am a Newbie and have just done the following - 1) Imported PA-VM-ESX-8.0.0.ova File into VMWare Workstation2) Started VM3) Logged into VM4) Set IP of Firewall with these commands configure set deviceconfig system ip-address 192.168.1.1 netmask 255.255.255.0 default-gateway 192.168.1...

Application Default Risk Factor---Exportable?

Hello all!I recently finished a migration in which everything went perfect. However, I'm now trying to find out how to export the Default Risk Factor of the applications so that I can compare to the build on the original firewalls as the risk factors had been customized. Is there a CLI command or some other way to export the risk factor config?

Roshawn by L2 Linker
  • 2340 Views
  • 2 replies
  • 0 Likes

configuration report

has anyone tried to set up a custome report that shows/alert or lets you know when someone has made a change to the configuration? Or if you have your own home grown method that you use to audit configuration changes.

jdprovine by L4 Transporter
  • 8146 Views
  • 13 replies
  • 0 Likes
  • 24337 Posts
  • 124 Subscriptions
Labels