General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 3171 Views
  • 0 replies
  • 0 Likes

Problem in making palo alto test lab

Dears ,

i installed palo alto ova and windows xp client and host is windows 10 , i am trying to make a test lab using cbtnuggets and my configuration as the following :

1- windows XP is on VMnet3 and has IP : 10.3.3.11/24

2- i added all VMnet to palo al

...

Resolved! IKEv1 phase-2 SAs increasing

Hello,

 

We are trying to clear and initiate IPsec connection using the following commands: 

clear vpn ike-sa gateway <value>
clear vpn ipsec-sa tunnel <value>
test vpn ike-sa gateway <value>
test vpn ipsec-sa tunnel <value>
 
However, the SA’s are not clear
...

Farzana by L4 Transporter
  • 2283 Views
  • 1 replies
  • 0 Likes

Inbound SSL Decryption issues

Wondering if anyone has an idea on why I might be getting "decrypt-error" on an Inbound SSL decrypt rule?

 

This service only runs a few times at night so I haven't done a packet capture yet... tonight I did some debug commands and found this in the lo

...

jsalmans by L4 Transporter
  • 6813 Views
  • 9 replies
  • 0 Likes

What is the long term plan for MineMeld

This project seems to be a very capable platform and I'm considering incorporating this into our environment. However, I have concerns about viability of this as a long term supported solution. Does this community provide any executive summery type d

...

Resolved! Export CSR via SSH

Hello,

 

I have created a CSR:

request certificate generate country-code DE days-till-expiry 1100 email NOC@DOMAIN.COM locality BERLIN signed-by external organization MYORG ip 1.1.1.1 algorithm RSA rsa-nbits 2048 certificate-name testcert name test.d

...

OCEDTRA by L1 Bithead
  • 4475 Views
  • 2 replies
  • 0 Likes

File blocking

I have setup file blocking object but it does not seem to stop all downloads.. (Ex.. Try to download file from cnet.com it gets blocked.. If I go to adobe and download adobe reader the setup file downloads). Also is there a way to block all files exc

...

rmsdip3 by L1 Bithead
  • 2010 Views
  • 1 replies
  • 0 Likes

VPN implementation best practice

I have a VPN configuration and testing with my vendor during business production hours. I am new to PA, so I am just wondering if I should schedule this during a maintenance window.

The VPN implementation includes:

- tunnels

- IP addresses

- static route

...

jac101 by L2 Linker
  • 1825 Views
  • 1 replies
  • 0 Likes

custom miner in super fast installation

Hi,

 

I trying to install custom miner for minemeld by this instruction: https://github.com/PaloAltoNetworks/minemeld/wiki/How-To-Write-a-Simple-Miner, but path to ft directory in my instalation is different to path in instruction.

 

And the result is th

...

Sergey_R by L1 Bithead
  • 2841 Views
  • 1 replies
  • 0 Likes

How to configure TMG's FTP over HTTP

Hello all, I'm currently migrating a TMG to Palo and have come across a rule that uses the protocol "FTP over HTTP".  I'm not a TMG expert so the above is about all I know of the rule - that and what Mr Google tells me.

 

Any idea how to configure this

...

  • 24292 Posts
  • 122 Subscriptions
Top Solution Authors
Labels