General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! NAT configuration - DMZ zone to Trust zone

I've had a total brain fade, and am unable to figure this out. Hoping you guys can help.

 

Network topology is relatively simple. Firewall has three zones - outside, inside and DMZ - DMZ has a /25 of "real" Internet addresses on it. Outside has a /30,

...

darren_g by L4 Transporter
  • 5038 Views
  • 2 replies
  • 0 Likes

Tcp service report for rules

Is there a report that I can run that will show me every rule that has tcp service applied? For example let's say migration tool is not an option and I do not want to scroll through 3000 rules to manually look. Or can I can export all rules and someh...

Restrict Any Any from Security Policy

Hi There,

 

At one of our sites we fell vicitim and have the dreaded any any security policy in place. We are trying to determine the best course of action to lock it down.

 

Would I create tap firewall ports and span all the traffic, then create new rul

...

nicford by L2 Linker
  • 2102 Views
  • 4 replies
  • 0 Likes

DOS protection rule

We are thinking of creating a DoS rule and I was wondering what the group thinks of this rule and what affect it would have.  

DoSrule.PNG
jdprovine by L4 Transporter
  • 3826 Views
  • 14 replies
  • 0 Likes

Resolved! Content s and Apps Updates

We have two 3050 units managed by Panorama. I have two related questions: What is the difference between Apps and Contents in Dynamic Updates?  If we have a support contract for the firewalls and Panorama but don't subscribe to Antivirus, Threats and

...

Moving from a single PA500 to HA pair of PA820

As the subject states we are single PA500 shop now moving to Dual PA820 in HA.

What can I expect when moving to this type of setup coming from a single FW setup.

Is there anything I need to look out for any "Gotchas"? So far I know I am using 5 copper

...

CTaveras by L1 Bithead
  • 5409 Views
  • 15 replies
  • 0 Likes

Resolved! Panorama import config of firewall

Hi

 

So setup my HA cluster woo hoo. So now I have setup panoram

 

I have gone to managed devices and added in my 2 PA from above - by serial number, I can see then, I can change context into them.  I went to each PA and add in the FQDN for the panoram i

...

Outbound decryption and PAN-OS 8.0.2

we recently upgraded from PAN-OS 7.1.10 to 8.0.2 and some (but not all) websites are no longer decrypting

 

For instance, gmail doesn't decrypt anymore and we have a rule that allowed that application. Since that traffic isn't decrypted, it comes up as

...

Resolved! Consuming mind meld feeds on Firewall

Hi,

 

I have minemeld running on Azure and it processes and creates feeds as I would expect and can view them in a browser. The only change from the inital Azure build I have done is to install my own go-daddy SSL cert so out the box browsers will tr

...

Resolved! Failed to Fetch Packages

 

Getting error while executiing

sudo apt-get update && sudo apt-get install -y minemeld rsyslog-minemeld rsyslog-mmnormalize

 

 

Error

 

Failed to Fetch http://minemeld-updates.panw.io/ubuntu/dists/trysty-minemeld/main/binary-amd64/packages 403 For

...

Capture2.JPG
hsoni by L1 Bithead
  • 8545 Views
  • 5 replies
  • 0 Likes

Resolved! GP Access Routes

Is there any way to negate adding a prefix to the GP Access Routes? We have an app that we don't want to change the communication path when a machine connects with GP. So if it was accessing this app through an external method it should remain that w

...

Resolved! Dropped Traffic

We have PA3000 running 7.1.10

I have issue where tarffic is being droped by the Deny All rule , the last rule even though I have allowed this tarffic to come in ext zone ext zone.

Also for some reason the destination seems to be Internal where as the i

...

Untitled.png
RC-BHF by L2 Linker
  • 3978 Views
  • 7 replies
  • 0 Likes
  • 24197 Posts
  • 100 Subscriptions
Top Liked Authors
Labels