General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

ACC Dashboard

So I know that within in ACC dashboard there is a Risk Score Displayed. There is also Rule list that that shows risky app assosciated rule name . My question is does Panorama give you overall risk score for the rule itself? For example what i

...

PA-5220 AUX ports SFP+ module attributes

Hi

I found this

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-check-the-media-type-on-the-interface-of-a-Palo-Alto/ta-p/71362

which gave me this

show system state filter sys.s1.p*.phy

But this I don't think shows me aux1 or aux2.

Any

...

Aged-out issue

Hi,

I have configured PA on Azure but it is unable to ping to PA.

It always shows that "aged-out" as error message.

Once I ping to proxy-server on Azure, the log is shown on PA but it is aged out and could not get the response.

I did set up Static route

...

Resolved! IKEv2 Site to Site VPN to Cisco ASA5540

Hi folks,

Are there any Cisco ASA specialists out there?

We have a problem with a site to site vpn connection between paloalto and an ASA 5540. Actually the problem seems to be on the ASA side.

The proxy id's on the PA are configured like this:

Remote

...

Resolved! Two Site to Site VPNs with the same external subnet.

I have a Site to Site VPN to a customer and they are using 192.168.5.0/24. I have a new customer using the same subnet. I have configured this on a Cisco ASA using PAT. I am fairly new to Palo Alto firewalls and do not know how to configure this.

...

Resolved! session per second

hello everyone , is anyone knows that how to view the number of new sessions per second on paloalto ? my pan-os version is 7.1.8 .

How to connect to vpn from commandline on MACOS Sierra

I work at a company where we use various version of MAS OS X and connect to client VPNs that use various verison of Global Protect. The problem is that we find many conflicts between versions of GP and the host OS and there cannot be two version of G

...

Resolved! Getting to internal servers

Hello all,

I have a Guest/BYOD Wireless Zone that can get out to the internet just fine. The internet & internal network can get to my webservers just fine. The problem im having is that my Wireless zone can not get an internallyu hosted website fro

...

Panorama Logs Delay ~1 hour

Our Panorama is showing logs (threat,url, etc...) about an hour after they occur on the firewalls.

Is this normal behavior? I'd like to be able to see the logs in near real time as they occur, otherwise the Panorama logs don't have much use if we

...

PA-3060 Dataplane

Hi Fellow Palo-Alto-ers,

Hoping this amazing community can help me shed some light on something!

I have a PA-3060 running PAN-OS 8.0.2. I am wondering what would be considered high dataplane CPU utilisation for this particular platform i.e. at what p

...

Resolved! Minemeld behind corporate proxy?

Hi,

There doesn't seem to be anything official on how to set up Minemeld to use corporate proxies. When trying to contact external URLs from within minemeld, it does not respect the proxy settings in either /etc/profile or /etc/default. It tries to

...

SaaS Report Platform Support

Hello Guys

i would like know regarding for SaaS report attachment support platform?

because i can't find out about the new platform(PA220 or PA820/850) support note.

the description as below

On PA-200 and PA-500 firewalls, the SaaS Application Usage re

...

Resolved! How to change RDP's default port

As you know, the RDP's default port is 3389, but someone always try to connect via this default port, this result the domain

accounts are locked frequently. so I would like to chang its default port,such as 33089, then others don't know the port,

s

...

Disable session timeout for Orcale application

How to disable session timeout for an application completely? In my case its Oracle that i want to disable timeout for.

Its breaking the database connection for our application. And what would setting tcp timeout value of zero for an app would do?

Resolved! Missing ip-netmask, ip-range or fqdn attribute

Just wondering if anyone else has seen this issue. I have a 5.0.2 Panorama managing multiple 5.0.2 firewalls, and a few 4.1.x firewalls.

Suddenly and for no obvious reason, I am getting the following error when trying to commit post/pre rules to ALL d

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free