This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

U Turn NAT from External to Internal with FQDN Object

I know how to create a standard U-Turn NAT from outside to inside and that works fine as long as the INTERNAL object is an IP Netmask address. On the NAT Policy Rule the Original Packet is a static IP on my external facing range. The Translated Packet needs to point to a device that will have a dynamic IP. This is a mobile cart that can trave...

TNaami by • L1 Bithead
  • 2971 Views
  • 1 replies
  • 0 Likes

GlobalProtect Certificate Profile not on Gateway and Portal

Is there any specific why someone would configured a certificate profille only on a GP Gateway and not on a GP Portal (or vice versa)? In tutorials or videos, I've always seen it configured on both, but on some networks I've seen people only configure on one of them

ce1028 by • L4 Transporter
  • 2238 Views
  • 2 replies
  • 0 Likes

Resolved! Policy behaviour change

Hello, We know that policy behaviour changed from version PAN-OS 7.1 as per the link below. https://live.paloaltonetworks.com/t5/Configuration-Articles/PAN-OS-7-1-Policy-behavior-change-application-default/ta-p/75664 However, we upgraded from 8.0.0 or 8.0.2 to 8.0.4 and noticed that it was not enforced in 8.0.0/8.0.2. Was there still a bug/issue...

Farzana by • L4 Transporter
  • 2610 Views
  • 2 replies
  • 0 Likes

Traffic for frontapp.com getting blocked

Hello, We need some assistance in allowing URL: https://frontapp.com through our FW. It is hitting the interzone-default policy and getting blocked. We made sure the category: computer-and-internet-info is allowed. Also, tried adding *.frontapp.com in the Allow list of URL filtering profile and added the application 'front' from the application ...

Policy.jpg
LogView.jpg
Deny-Traffic.jpg
Farzana by • L4 Transporter
  • 2567 Views
  • 1 replies
  • 0 Likes

Raw log file extraction

Hi All , Can anyone tell how to extract old the log files from CLI , is there any dirctory to reach which contains log file please provide us the path .

Himarya by • L1 Bithead
  • 6865 Views
  • 5 replies
  • 0 Likes

SNMP problem

Hi everyone I have a palo alto device with snmp configuration to send snmp packets when something happen (for example when an interface is down or up), the problem is when an interface is down the snmp server does not see snmp packets and if I make a packet capture I only see the next My palo alto device is 10.19.160.205 and the snmp server is...

snmp.png
SergioHV by • L0 Member
  • 2539 Views
  • 1 replies
  • 0 Likes

How to deploy CA Palo Alto for non-join Domain!

Dear All, we have done to install PALO ALTO 3020 on our network, but I have a problem as follows.Now I have minimum 150 PCs not join the domain, and we need to deploy the CA for all of them by the automatid way!!! everyone from this PCs has a User Name on Active Directory Thanks

MOsama by • L1 Bithead
  • 5130 Views
  • 7 replies
  • 0 Likes

Multi Rule Edit

Is there a tool out there to perform multiple rule edits? OR am I forced to do a "find & replace" method by copying CLI? In this case, I'm trying to enable log session at end for all rules.

nicford by • L2 Linker
  • 2762 Views
  • 2 replies
  • 0 Likes

Resolved! failed to load: Internal memory error

Hi All, GP gateway was working fine and suddenly stopped working. Any changes to the certificate or tls profile give the following errors: 2017-07-30 09:56:06.456 +0100 Warning: pan_cfg_sysd_parse_response_msg(pan_cfg_sysd.c:859): got error response from cfgpush.s1.comm.cfg: Error: Certificate'GlobalProtect-GW' failed to load: Internal memory e...

Log-collector on 8.0 and panorama/FW's on 7.1 - Compatibility?

Anyone tested this or know if it is documented on the compatability or not with 8.0 on the log-collectors but everything else on 7.1.I know the rule of thumb that your manager (panorama) is to be your highest code version, however with the log-collector I could see this not applying.I plan on labing this but wanted to reach out to the community ...

AD trouble after installing content version 729

We had problems with AD after installing content version 729 this morning. Users were authenticated, but the logon process (group policy, drive mapping) was painfully slow. After we reverted to version 727 everything was OK again. The strange thing is that I see no traffic to our AD controllers being stopped by the firewall. Anybody else seen th...

Resolved! Can you throttle logs forwarded to Panorama?

I want to know if there is a way to throttle the bandwidth logs forwarded to Panorama from a PA-3020. I have several PA-3020 firewalls that I want to connect to Panorama and they have several hundred MB of logs each. They have never previously been managed by a Panorama before. I am afraid once I add them to Panorama, the firewalls will attempt ...

PAN-OS 8.0.4 - Sporadic Success on Content & Anti-Virus upgrades (PA-200)

All, I opened a ticket on this with Palo Alto but I thought I would reach out here as well. Even since upgrading from 7.1.x to 8.0.4 on PAN-200 firewalls I am getting inconsistant success in upgrading Content or Anti-Virus packages. It's so inconsistant that I have two of our firewalls working without issue, but several others failing to upgra...

image.png
  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks