General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

HSM setup in PAN-OS 7 setup HSM partition missing

Hello all

I'm new in HSM configuration

I configured the   setup hardware security module. with a PANOS version 7 

the result was success  

and in the admin guide is wrote that you have to configured the Setup HSM Partition

but this does exist in the

...

HSM.png
Gregoux by L4 Transporter
  • 1888 Views
  • 1 replies
  • 0 Likes

Upgrade Panorama

hi,

 

I have cluster firewalls in versions 7.0.4 but my panorama is in 6.1.2. Ive never upgraded panorama. Any manual??

Should i install the imagen base 7.0.1 to go to 7.0.4 or just donwload?????? its the same that upgrade a palo alto firewall?? any

...

Firewall rule auditng

Has any body have a procedure on how to audit and remove rules? We have alot of what appears to be unused rules so far I disable them, date when I disabled them and then a 30 days and then delete them. let me know if any one has any better method or

...

jdprovine by L4 Transporter
  • 2107 Views
  • 10 replies
  • 0 Likes

URL Filtering when Users are in Multiple Groups?

I am unsure of how to solve this issue with URL filtering.  Lets say HR wants to block the job search category and the hacking category except for specific users.  I have an Active Directory group to allow Job Search for people who are allowed to acc

...

Blocking Opera

Hi there,

 

I’ve recently discovered that some users have downloaded Opera and with this they can have unfiltered internet access. I am going to remove this software from the PCs but wanted to know if there is a way I can block this traffic using my

...

Error UserID

Hi, my users are having a error. sometimes when they try to access to any web, suddenly, the captive portal is shown (even if they are logged in domain). If they put the credentials in captive portal the web works and also if they logoff/logon the wi

...

Need email report on expiring policy

Our operations group implements firewall policy exceptions with start and end dates. They've requested to receive email notices when a policy is nearing an expiration date and when it expires. The report scheduler appears limited to threat and user a...

Lepton by L1 Bithead
  • 991 Views
  • 0 replies
  • 0 Likes

Resolved! Report-based Logging Without Interfering With Policies

Hi PANland, I'm back with another implementation question th

 

So PAN devices log when you tell them to, but for their reports feature it seems that with or without logs they will keep unmutable counters of very basic information that has to be parse

...

Resolved! Can't remove vsys specific SSL TLS Service Profile

This is a strange issue.

 

PA-3020 recently upgraded to 7.0.4.  The firewall is in single vsys mode.

 

I installed new SSL certificates for Global Protect.  Somewhere during the process of installing the new certificate and upgrading to 7.0.4, an ssl

...

mausmus2 by L3 Networker
  • 10857 Views
  • 13 replies
  • 0 Likes

ESM service account rights

When I try to install the ESM core and console with a service account that does have the logon as a service rights but not administrator rights, I keep running into issues. As I don't like to grant full admin rights to a service account on a box I'd

...

Total Memory increasing after upgrade firmware

Hi All,

 

    We've two PA-5020 running in our environment. After upgrade firmware from 4.1.11 to 6.1.6 (just one device), we found out that total memory in "show system resource" are increasing.

 

      4.1.11 

 

 

      6.1.6 

 

       So just wo

...

4.1.11.png
6.1.6.png

Resolved! How do I identify which PC made a suspicious DNS query?

Hello

 

I have setup the Anti-Spyware Profile in our firewall and I have a lot of threat logs of type spyware suspicious DNS  queries from a domain controller machine and this is cleansed.

Monitor > Logs > Threat list

As you can see I have configure

...

sinkhole.jpg
SOC_CSG by L4 Transporter
  • 4761 Views
  • 3 replies
  • 0 Likes

Resolved! Cisco VPN traffic

If a vpn tunnel has been successfully established from a cisco device and passing through the PA firewall, is it possible for the PA to still drop the traffic destined for the established tunnel?

jdprovine by L4 Transporter
  • 2261 Views
  • 4 replies
  • 0 Likes
Top Liked Authors