This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

How to count sessions at Palo Alto.

Hello all.I would like to know how to count sessions at Palo Alto.I do not understand that the number of sessions is different between the two devices.The two devices are Palo Alto and BIG-IP.It is counted as 140 thousand sessions at Palo Alto and 30 thousand sessions at BIG-IP.Thank you.

awawa100 by • L2 Linker
  • 4651 Views
  • 2 replies
  • 0 Likes

Syslog multiple configurations

I am having no issues actually sending syslog data. The issue is sending to much over the network. I have two different applications that require syslog data from the firewalls. One application requires all the logs with all the content. The other application only requires a limited number of fields in the trafic log and all of the change lo...

vseward by • L1 Bithead
  • 6047 Views
  • 4 replies
  • 0 Likes

packet-diag flow basic “matched rule index 0”

What does the rule with the index number 0 refer to in the packet-diag flow basic for the security as well as the NAT policy? The id manager does not show a security nor nat rule with an index 0 while the show session shows that the traffic was matching security policy “General-Internet” which is index 7 and NAT policy “Student-NAT-Out” which is...

Problem with NAT

I have an interface layer 3 on Palo Alto device with an IP public X.X.X.X connected to a router with IP public X.X.X.Y, I can ping the IP of the router, but from the router to the Palo Alto does not have ping, I have a profile of management that allows the ping, additionally has a NAT with the IP X.X.X.Z which is only used to go out to internet ...

SergioHV by • L0 Member
  • 2277 Views
  • 1 replies
  • 0 Likes

Anyone running Sophos antivirus/webfiltering solution on client machines?

It appears that the sophos client on the windows machines uses its service account username to browse on behalf of the user. So essentially being a proxy for the user, the issue is from the monitoring aspect of the palo alto, I can't see the true user-id that is browsing. Anyone run into this or something similar? Any fixes on the palo alto side ?

cron services restart of minemeld

Hi, I'm researching about restart all the services of minemeld but I don't get nothing. How I can do it? I would like set a task on cron for example. is it possible? Please, if you need more info let me know! Thanks

SantiBT by • L2 Linker
  • 5325 Views
  • 3 replies
  • 0 Likes

Resolved! Low Forwarding 8.0 (7050)

When following white paper. When i get to verify i get below: Not sur ewhat this means as I only have 1 collector . Please adivse admin@PALO-TIA-03P-HA(active)> show log-collector preference-listLog collector Preference List is malformed

How to delete all unused rules?

Hi Guys! I am looking for an way to delete all unused rules. On CLI, I can list all unused rules: > show running rule-use rule-base security type unused vsys vsys1 After that may it is possible to delete the rules from it. Thanks!

User-ID Mapping To Not-Domain-Joint Devices

Hello, What would be the best way to enable User-ID for devices that aren't joined to the domain? We have a number of contractors whose laptops aren't members of the domain but we would like to enable User-ID to be able to monitor their User-IDs? Thanks in advance. Best, ~zK

Resolved! User-ID for Non-AD Operating Systems?

I'm curious what others out there are doing for user identification for systems that don't integrate with AD? My understanding for Mac OSX was that some are popping up a GlobalProtect client login that requires them to enter their domain credentials to continue but then just uses it for ID purposes and does not establish a tunnel. I was curious...

jsalmans by • L4 Transporter
  • 6122 Views
  • 4 replies
  • 0 Likes

Windows Update issues - Windows 10

I am currently troubleshooting an issue on PAN-OS 8.0.4 regarding the ability for Windows 10 / Windows Server 2016 to update via Windows Update. Windows Update for Windows 7 is working fine, however any time I try to download updates on Windows 10 (Creators Update) it fails unless i add a the subnets below to exclude them from decryption. As t...

  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks