This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

NTP and proxy bypass

Hi i have a problem at the moment where it appears there is a proxy/Vpn application that is using port 123 .as i have lots of byod devices that require access to NTP i leave the port open. When I look at the monitor logs it source port can be anything from 123 to any other port and the dest port is 123 and P.A is letting me know the application ...

Resolved! Query on Certificate/access Internet

Is there a way to configure the firewall so that users can access internet without needing to install certificate?Currently users have to have a certificate installed on their devices to be able to connect to the internet.Any article on this?

Farzana by • L4 Transporter
  • 3088 Views
  • 2 replies
  • 0 Likes

Session info not in sync in CLI and Web GUI

My PAs are on PAN OS 7.1 OS, I have noticed that session info is immediately displayed in CLI when I use sh session all filter command but when I see in GUI , there is a delay or sometimes I never see that session in Web GUI >Monitor>trafficIs this a bug ?

Resolved! After upgrading a pair of PA-3050 to 8.0.4, very slow throughput, reduced network connection speeds

After upgrading a pair of PA-3050 to 8.0.4, very slow throughput, reduced network connection speeds Before upgrading from 8.0.2 to 8.0.4, we hace average speeds of 18/18 Mbps with other headquarters, and 100/100 with Internet.After upgrading to 8.0.2, we have very slow connection with headquarters and Internet, average speeds of 300 Kbps with he...

High Avaibility problem A\P

There are two PA-500 firewalls in High Availability state A\PAfter failover process the passive device become active but didnt pass the traffic.One possible reason which i suppose to be is the Gratious Arp packets are not send to the port of switch (cisco 3850) which is connected to passive devicebecause when we type show mac-address interface ...

Radmin_85 by • L4 Transporter
  • 3031 Views
  • 3 replies
  • 0 Likes

Global Protect - Nowhere to enter credentials

Hiya, I'm very new to this so if this is the wrong place please move it or let me know so I can repost in the correct place. I use Global Protect to connect to my University account through a VPN. However it updated overnight and is now version 4.0.4-9. Before it updated I had the option to enter the Portal, Username and Password. Now i only hav...

EmsUni by • L0 Member
  • 2000 Views
  • 1 replies
  • 0 Likes

Custom report export takes a lot of time

I am facing an issue while exporting a custom report. I am running 8.0.3 on PA-220. After I create a report I used "Run Now" option and tried exporting the result (100 records) into CSV/PDF. It is taking a lot of time in Exporting state. I thought it is due to ip-hostname resolve timeout and tried unchecking the Hostname columns. But when I hov...

Minemeld upload feeds from otx AlienVault

Hi, I just trying to figure out how correctly add miners from OTX AlienVault. The main Issue is when I added threat feed or any indicators from different groups or AV user, it always stuck with error "collection error - not found". Using prototype something like this :_________________________________age_outdefault: 30dsudden_death: falseatt...

What is: 'Syslog connection established to server[\'AF_UNIX./opt/pancfg/mgmt/syslogng/logd.\'

Hello, we have the following event in our panorama log: Type: syslogSeverity: highEvent:syslog-conn-statusDescription: 'Syslog connection established to server[\'AF_UNIX./opt/pancfg/mgmt/syslogng/logd.\' Can anyone please explain what this means? Is this the syslog-connection of the local Panorama-device to its filesystem?The event occours serve...

Clermont by • L2 Linker
  • 2917 Views
  • 1 replies
  • 0 Likes

205 access points blocking one ssid

We are current ly running 4 ssids on our network. One of which is for our food service. We have 3 accesspoints providing coverage over the commons during lunch, we would like to disable one ssid created for student use while leaving the others open on the access point closest to the POS units. Is this possible or is it an all or nothing deal?

the easiest way to get the peak number of active sessions on firewall?

i'm wondering to aquire the easiest way to get the peak of number of active sessions on firewall? some ways i figured out are1) check SNMP active session OID every minute and spot a chart.2) fire up SSH "showing session info" every minute by a python snippet.3) seems like to built a customized report by couting traffic log4) chrome has a plug...

DannyDai by • L1 Bithead
  • 2759 Views
  • 1 replies
  • 0 Likes

IPsec Site-to-Site VPN trouble (decap bytes 0)

Hi all.I am trying to set up an IPsec s2s tunnel with non-Palo Alto peers. So far I have tried 3 different peers (Strongswan 5.3.2, Cisco router, Cisco SOHO router) and every time I have problems seeing incoming decrypted traffic to the PA."Local site" being the PA one, here's the info I have so far:- IPsec tunnel is up- "show session all filter...

AMS-IX by • L1 Bithead
  • 27933 Views
  • 11 replies
  • 1 Likes
  • 24447 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks