This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by • Community Team Member
  • 371 Views
  • 0 replies
  • 2 Likes

iph1->ivm == NULL

Dears,

 

Since two days i am getting this message "iph1->ivm == NULL"  and all VPN with ASA on the other side is facing iKE Phase 1 time out

 

 

pan1.PNG
Ammar by • L2 Linker
  • 2912 Views
  • 5 replies
  • 0 Likes

Best practice with defining Zones - how many is too many

Hi

 

So I have 3 locations (DC), Internet access , Vendor access, environment (Prod, Uat etc) and user and support users and dmz and ...

 

should each of these be a zone ???  I am thinking not, after have a bit of a play, you can't make dynamic zones fro

...

Resolved! NAT and OSPF

Hi

 

I have a PA-3060 (A-A).

 

I have a NAT lests say 

 

1.1.1.1: 443 -> 192.168.10.10:10000

 

now the PA is part of an OSPF network, how to I publish out the address 1.1.1.1

 

I was thinking of adding 1.1.1.1 to a loopback and adding to a virtual router and t

...

Upgrade to 8.0.2 bricked my PA500

So am I the lucky one to have what should have been a simple upgrade brick the firewall?

Was running 7.1.7, normal download and install 8.0.2

Firewall came up with the yellow status light.

Was able at that point to login to gui.

Found this little darling

...

gefuchs by • L1 Bithead
  • 4515 Views
  • 8 replies
  • 0 Likes

Resolved! Dynamic Updates on PA-200

I have a PA-200 that is configured to check for updates every half hour aprox. The thing is that Antivirus, Aplications and Threats are not installed as scheduled!!!

 

When I log in to check, the check to Internet is done, but the package is not downlo

...

Two-Factor authentication failures

Hi, we have a few clients using GlobalProtect as VPN (various versions), some are authenticating using 2FA, using SecurEnvoy as a RADIUS server.

 

What we're seeing is as follows - the user has an authenticated VPN connection, then their network connec

...

A.Mellor by • L0 Member
  • 2996 Views
  • 1 replies
  • 0 Likes

Resolved! Non-interruptive Panorama device migration

Hello!

Is there any way to perform migration of local configured firewall to panorama management without service interruption?

For example:
I use Panorama 7.0
There is configured PA-5060 6.1.5 HA-cluster that I need to migrate to centralized Panorama Man

...

Minemeld - Cannot create new Miner Node

Heya All,

 

I've been testing out minemeld and have it a bit of a brick wall.. When I attempt to create a new miner node via CONFIG > NEW, it completes successfully but the node cannot be found listed under nodes so I cannot add it as an input to the

...

Resolved! Filter items from source feed

One of the feeds I would like to import is the alienvault feed.  However, I only want a subset of the IPs listed.  I have tried using a regex with a transform to limit the results, but the miner is still showing an indicator count of 54,000.

 

I clon

...

deanm by • L2 Linker
  • 8455 Views
  • 11 replies
  • 0 Likes

Resolved! HA configuring questions?

Hi folks,

 

A couple more questions about HA, if you please.

Hopefully my post frequency will reduce after training next week.

(Yes, configuring HA just before the training this weekend)

 

I will configure HA on an existing running production PA-3020 and t

...

OMatlock by • L4 Transporter
  • 4175 Views
  • 9 replies
  • 0 Likes

Resolved! Bootsrap Image Error

Hi All

 

I am seeing the following in the system log of a PA-200 on reboot:

 

 critical hw             bootstr 0  No bootstrap media detected

 

 

I can't find any reference to this message anywhere and indeed all the errors that can be ebcountered while boo

...

Export Configuration

Hi,

 

It is probably very simple thing.. I wish to retrieve full configuration of Palo Alto firewall to build new firewall which will NOT be managed by Panorama.

 

Could someone please suggest me procedure or command on how to retrieve (via web or cli -

...

session QoS rule

Hi,

i have created a qos rule for skype and assign class which is real time ,

When I look in to the session details I could not find the session qos rule .

 

 

 

How to interpret the details ? 

for example like flow1 c2s and flow 2 c2s and PRED

any related d

...

skyp.jpg
simsim by • L4 Transporter
  • 1904 Views
  • 3 replies
  • 0 Likes
  • 23680 Posts
  • 108 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks