General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

integration with opendns

Hi MineMelders:

 

anyone looked at or is currently integrating output from minemeld, specifically DNS indicators from wildfire/autofocus, to openDNS (umbrella now) API?

 

Thanks!

oreiter by L0 Member
  • 3731 Views
  • 0 replies
  • 1 Likes

Resolved! Flow basic

Will a debug flow flow basic  show  me if Im actually raching destination server? What I mean is if I have a server that is used for BAS_Filer mounts will it show me that Im not mounting to destiantion server that does the actaul mount? I know the pa

...

app-id for amazon video on ipad?

I am using a PA200 with 7.1.7 and app version 652.  There is an app-id called amazon-instant-video.  After I watched Grand tour on amazon video on ipad and air play on the apple tv.   I want to see how many gigabytes did I just use,  I can't find usi

...

Resolved! See full list of "Config Logs"

Hey guys,

 

there is this "Config Logs" Widget on the dashboard of the Palo Alto 3020.

 

But there are only a few entries.

 

Is there a possibility to see more entries?

 

Thanks for a reply!

MPI-AE by L4 Transporter
  • 1621 Views
  • 1 replies
  • 0 Likes

Panorama licensing

I think that this is simple but I am just missing it. I am looking for what my license limitations for my Panorama are. I have looked on my support site and googled it but I seem to be unable to find it.

Essentially I have a number of devices currentl

...

tebert by L1 Bithead
  • 1524 Views
  • 1 replies
  • 0 Likes

Overlapping Subnets and NAT

Hello,

 

I have a new client we have a direct L3 link with. Our firewall has an existing directly connected interface on the 10.10.0.0/16 subnet. Our client also has a subnet of 10.10.0.0/16 which we need to get to.

 

During my initial testing I decided

...

Issues with ipsec traffic from PA3020 to Cisco 871.

I have a working tunnel between Netscreen and Cisco 871. I tried to move this from Netscreen to PA3020.

The tunnel comes up. PA3020-local network-192.168.2.0/24 and remote-192.168.235.0/24.

Traffic from 2.0(palo side) to 235.0(cisco side) network is fi

...

Resolved! Application Dependency question (l thought l knew it)

Heys,

 

A bit confused now :0

 

My policy as below:

 

 

So port 80 is allowed when l attempting to connect to the device over the web browser (Chrome) but after Palo actually identified that this is not a "panos-web-interface" app (based on tcp 3 way handsh

...

INBOUND.PNG
TR-LOG.PNG
DEP.PNG

What's new in MineMeld 0.9.36

Release Date: 2017-03-21

 

How to update: Updating MineMeld

 

Nodes

  • JSON Miner now supports Basic Auth via prototype (suggested by @Kimwii)
  • TAXII Miner now supports subscription_id, client cert support has been improved, added support for LinkObjectTy
...

lmori by L7 Applicator
  • 5802 Views
  • 4 replies
  • 6 Likes

Resolved! DMZ to inside LAN

I know you need a security policy to go from dmz to Lan but do you need a nat statement.  On all the Palo Alto documents that I have seen no nat rule is used.  If I am wrong could some one send me a link.  

 

Thank you 

Global Protect: Two preferred NIC listed

Windows 7 laptops with global protect client installed.

 

When I plug my laptop into a wired(ethernet) connection, the wireless IP and the wired IP are showing up as preferred. If I remove global protect from these laptops the wireless IP goes away whe

...

image002.png

Resolved! Reset pass user admin via web

Hi,

 

How I do reset the password user admin again??? I have this messages "bad gateway" when I put the credencials on the access web.

 

I can't login

 

Do you kwon something about this, please?

 

 

Thx

 

SantiBT by L2 Linker
  • 4264 Views
  • 1 replies
  • 0 Likes

Resolved! Problems users with Windows 10 and User ID agent

Hello,

 

I need your help with the following scene:
I have some machines with Windows 10 Operative System and I have detected a problem with the PA Firewall. The Firewall is not detecting the user (UIA), so the policy rules are denying the access.

Panos

...

SOC_CSG by L4 Transporter
  • 6818 Views
  • 10 replies
  • 1 Likes
  • 24195 Posts
  • 100 Subscriptions
Labels