This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

packet-diag flow basic “matched rule index 0”

What does the rule with the index number 0 refer to in the packet-diag flow basic for the security as well as the NAT policy? The id manager does not show a security nor nat rule with an index 0 while the show session shows that the traffic was matching security policy “General-Internet” which is index 7 and NAT policy “Student-NAT-Out” which is...

Problem with NAT

I have an interface layer 3 on Palo Alto device with an IP public X.X.X.X connected to a router with IP public X.X.X.Y, I can ping the IP of the router, but from the router to the Palo Alto does not have ping, I have a profile of management that allows the ping, additionally has a NAT with the IP X.X.X.Z which is only used to go out to internet ...

SergioHV by • L0 Member
  • 2285 Views
  • 1 replies
  • 0 Likes

Anyone running Sophos antivirus/webfiltering solution on client machines?

It appears that the sophos client on the windows machines uses its service account username to browse on behalf of the user. So essentially being a proxy for the user, the issue is from the monitoring aspect of the palo alto, I can't see the true user-id that is browsing. Anyone run into this or something similar? Any fixes on the palo alto side ?

cron services restart of minemeld

Hi, I'm researching about restart all the services of minemeld but I don't get nothing. How I can do it? I would like set a task on cron for example. is it possible? Please, if you need more info let me know! Thanks

SantiBT by • L2 Linker
  • 5351 Views
  • 3 replies
  • 0 Likes

Resolved! Low Forwarding 8.0 (7050)

When following white paper. When i get to verify i get below: Not sur ewhat this means as I only have 1 collector . Please adivse admin@PALO-TIA-03P-HA(active)> show log-collector preference-listLog collector Preference List is malformed

How to delete all unused rules?

Hi Guys! I am looking for an way to delete all unused rules. On CLI, I can list all unused rules: > show running rule-use rule-base security type unused vsys vsys1 After that may it is possible to delete the rules from it. Thanks!

User-ID Mapping To Not-Domain-Joint Devices

Hello, What would be the best way to enable User-ID for devices that aren't joined to the domain? We have a number of contractors whose laptops aren't members of the domain but we would like to enable User-ID to be able to monitor their User-IDs? Thanks in advance. Best, ~zK

Resolved! User-ID for Non-AD Operating Systems?

I'm curious what others out there are doing for user identification for systems that don't integrate with AD? My understanding for Mac OSX was that some are popping up a GlobalProtect client login that requires them to enter their domain credentials to continue but then just uses it for ID purposes and does not establish a tunnel. I was curious...

jsalmans by • L4 Transporter
  • 6155 Views
  • 4 replies
  • 0 Likes

Windows Update issues - Windows 10

I am currently troubleshooting an issue on PAN-OS 8.0.4 regarding the ability for Windows 10 / Windows Server 2016 to update via Windows Update. Windows Update for Windows 7 is working fine, however any time I try to download updates on Windows 10 (Creators Update) it fails unless i add a the subnets below to exclude them from decryption. As t...

Resolved! SNMPv3 Prfile import /export

I have a current SNMP profile using snmpv3. This setup in Panorama is in production. In the event i want to mimic this SNMPv3 profile in my lab Panorama is it possible import just the SNMPv3 profile portion of config with the encrpyted password as well into my lab from prod or would I have to manually type snmp auth/priv passwords in lab bo...

Setting independent headers on HA cluster members

Hello, I set headers (Device > Setup > Management > General Settings) for each machine in an HA cluster to identify which machine I'm looking at per the recommendation in the Fuel Best Practices book. I was surprised to see that the setting syncs to both machines, which kind of reduces the utility of the feature (the machines are geogr...

gleduc by • L1 Bithead
  • 2622 Views
  • 3 replies
  • 0 Likes
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks