This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! PAN OS REST API

I am just starting out and learning automation. I am using PAN OS 10.2 on PA 820 lab device. When I try to use a use the GET Method to query addresses, the restapi-doc shows: https://10.x.x.x/restapi/v10.2/Objects/Addresses . I don’t see the “"Invalid Query Parameter: key". Could it be that my API key is bad or invalid? Below is my curl ...

Amin2 by • L2 Linker
  • 2832 Views
  • 2 replies
  • 0 Likes

PA Antivirus content updated Signatures not able to view on Panorama Antivirus profile

1. The issue is that customers are unable to see the signature exceptions of the Antivirus security profile in Panorama and firewall, but they are able to see the exceptions of other security profiles, so you need to check on the same. 2. First, we checked for this behavior and tried to manually upload the signatures and it was added successfull...

Resolved! SSL Decryption Auto Tag URL to No Longer Decrypt

Hi, I am working to get SSL decryption built in our environment. I have policies I want to start with. NoDecrypt_ByDestination (add sites as needed to dst and has NoTLSDecrypt-grp) NoDecrypt_BySource NoDecrypt_ByCategory (financial-gov-health-legal and custom URL Object Do-Not-Decrypt) TLS_Decryption - actual decrypt rule What I'd like to s...

Resolved! commit confirmed X on PaloAlto firewall ?

Hello All, I am a newbie to PA firewalls but have some experience with JunOS firewalls. I like the "commit confirmed XX" command on JunOS because it will revert a change after XX minutes if for some reason I get locked out. A good example is when changing speed/duplex on an edge firewall that I may get locked out of. Is there an equivalent com...

Cisco SFP-10GB-LR in PA-3430

Hi All, Has anyone tried this yet and does it work? to use a Cisco SFP-10GB-LR module in a PA-3430. yes I am aware of the support aspect around not being true palo branded, but time is of the essence and I need a quick solution as the Palo branded SFP is 5-6weeks leadtime and cannot wait that long.the Cisco SFP i have some spares but not close...

PA_nts by • L4 Transporter
  • 4413 Views
  • 3 replies
  • 0 Likes

Website works in Incognito but in normal browser

Hi Team, We have issue with the Videos playing in Normal browser. But it works fine with the Incognito Mode. This traffic passes through the Prisma and i dont see any issues as such which could relate this issue. Any one faced this weird issue before, if yes please suggest the solution you implemented to get through this? Regards, Sanjay S

Issue with PA-1410 platform disk size

Hello Team, Recently we have deployed PA-1410 in our datacenter and since first day we are having issue with disk space in loggin. and after contacting the support, logging is not more than a week which is not accepted from our side. I know that the PA-1410 disk is 128GB. Did any one met with a similar issue? what was the solut...

Need to block chrome-remote-desktop from outside coming in

I've been on this project for a few days with no semi-success. i have a PA VM-200. I've used the built-in 'chrome-remote-desktop' protocol, and doesn't work. The description seems to say this protocol is in BETA and is for the support function fo the chrome-remote-desktop. ive tried blocking the following ip addresses/networks172.217.0.0/1621...

source-ips.jpg
service-url Category.jpg
log1.jpg
log2.jpg
b8cons by • L0 Member
  • 14137 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama hypervisor support

Hello PA community, Customer run an internal scan where it turned out Panorama is running on an End of Life Hypervisor (CentOS 8). Indeed, we can notice this as mentioned on below doc: https://learn.microsoft.com/en-us/azure/virtual-machines/workloads/centos/centos-end-of-life *CentOS 8 - December 31, 2021 we checked the below compatibilit...

Global Protect connections fails after 20-30 seconds

Hello, We have an issue with a Global Protect connection failing for some users in couple of seconds after we migrated from PA 3000 to 1410 series FW. PA 3000 was 10.2.9 and the new FW came with PANOS 11.1.2-h3 version. For the users with the problem, the connection is established correctly, they get the tunnel IP and can access resources, bu...

RafaelGarcia_0-1727368158358.png

Resolved! Difference between apps and contents

Dear PAN community,When a new 'Applications and Threats' signature is release there are typically two versions that have the same Version name (e.g. 350-1658) but then differ in the File Name and Features description.As a current example, Applications and Threats Version 350-1658 was released on 2013/01/15 and there are two of them, one with Fil...

tommyluke by • Not applicable
  • 7682 Views
  • 5 replies
  • 0 Likes

Panorama high MIB memory

Hello community! We are monitoring the Panorama system resources and we get alerts regarding memory (MIB). We don´t have any performance issues though. Can you advice if the following memory levels are fine or it´s too little memory free? > show system resources top - 15:54:07 up 144 days, 33 min, 1 user, load average: 0.68, 0.76, 0.87...

Carracido by • L4 Transporter
  • 3373 Views
  • 4 replies
  • 0 Likes

Starting from PAN-OS 11.0 version, is the only interface link duplex set to auto?

Dear Team, I noticed something unusual during testing. Starting from 11.0, the only option for interface link duplex setting is 'auto'. I've checked the changes and restrictions in 11.0, but there are no explicit details about them. Is this by design? Could this be a bug? I checked both GUI and CLI, but couldn't configure it. The OS ...

KyungjunCHOE_0-1721887749138.png
KyungjunCHOE_1-1721887749141.png
KyungjunCHOE_2-1721887749275.png

Negate networks within an object group

Hi, is it possible to negate certain networks within a rule? example.. src (192.168.0.0/16) and dest (10.0.0.0/8) action Deny but want to negate dest 10.200.0.0/24 in the same rule so that 192.168.0.0/16 cannot talk to 10.0.0.0/8 but can talk to 10.200.0.0/24 (allowed lower down the order) the FW negate option negates all the objects within ...

PA_nts by • L4 Transporter
  • 1556 Views
  • 2 replies
  • 0 Likes
  • 24403 Posts
  • 123 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks