This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Globalprotect client

I want to do some testing on new global protect clients but I don't want to make it update anyone tell I can test it, How do I get the software to test with out making it the default cleint on the firewall?

jdprovine by • L4 Transporter
  • 6069 Views
  • 25 replies
  • 0 Likes

Security policy: exception question

Hi, I'm trying to create a security policy that would block all critical traffic from source zone "A", to destination zone "B". However, I want to allow traffic from a specific IP in zone "A". How can I make an exception to allow that IP? I assume I

...

Resolved! message security over http

How does PA handle message security over http ?

Whereas https secures the communication, message security secures the content.

 

I would expect PA does not touch http content. But we are having issues with an application that connects to a partners serv

...

dieter_b by • L4 Transporter
  • 7640 Views
  • 16 replies
  • 0 Likes

Resolved! Replace ASA5505 with PA200 Teleworker

I have a remote user that's setup with an ASA5505 configured for teleworker. They move around and don't always have a static IP address at their locations. It's configured to call home to my ASA5540s and create the tunnel.

My question is if the PA200

...

JeffDBO by • L1 Bithead
  • 2753 Views
  • 4 replies
  • 0 Likes

Resolved! AutoFocus Miner Thought

Getting the minemeld engine up running the AutoFocus/TAXII redesign today, one thing I noticed while trying to create better and more targeted AutoFocus miners is that I cant create a list that maintains a specific “age”

 

Where many lists will allow

...

hallerr by • L2 Linker
  • 4514 Views
  • 3 replies
  • 0 Likes

Resolved! POP3, SMTP and IMAP setup

Hello,

 

Our POP3, SMTP and IMAP is currently set to Default (Alert) in the AV profile.

 

We have noticed malicious emails coming through and identified via Wildfire for staff using personal email addresses/computers using POP3 protocols? These personal

...

Antivirus.png
Farzana by • L4 Transporter
  • 8540 Views
  • 4 replies
  • 0 Likes

Custom App-ID vs "Unknown-UDP"

If I create a custom app-id for an application we use, will it no longer match the "unknown-udp" (which we block)? Or do I need to do an application override as well?

Global Protect on MAC - How to Clear Cookie?

I'm running Global Protect on my Macbook.  I have the gateway configured to accept cookie and set to 24 hours.

For troubleshooting purposes I'm trying to figure out how to clear my cookie on my Macbook so it does not automatically connect.

craigkp by • L0 Member
  • 4414 Views
  • 1 replies
  • 0 Likes

SKYPE

Why would a rule with app-id of skype show up in logs as ms-lync when Lync is not part of rule

Resolved! A little help with Subinterfaces and intraVLAN routing

 

I have a PA-3020 with fairly typcial config with a L3 untrusted interface and several trusted sub interfaces. I have a couple questions.

 

Prior to this, I was doing my intravlan routing on my core HP2920 switch. My 192.168.123.0/24 network is the nat

...

firefox_2017-03-22_06-35-32.png
Raland by • L1 Bithead
  • 3292 Views
  • 4 replies
  • 0 Likes

User-ID agent upgrade consideration

Hello,

 

I have two Palo Alto Firewalls, each running different software version, 7.1.5 and 7.0.7.

Both firewalls connected to the same User-ID agent server. The User-ID agent version is 7.0.5-3

 

I am planning to upgrade one of the firewall from 7.1.5 to

...

qafcopa by • L1 Bithead
  • 2868 Views
  • 1 replies
  • 0 Likes

Resolved! Global Protect Agent captive portal Graceperiod timeout

Hello,

 

When the Enforce GlobalProtect Connection for Network Access feature is enabled, we can define a Gaceperiod to allow users to temporary connect through a captive portal ( hotel proxy...)

 

Maximum timeout, i can see is 3600 seconds (1 hour)...

 

W

...

  • 23560 Posts
  • 106 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks