General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience.

General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 489 Views
  • 0 replies
  • 2 Likes

Unused rules

I know it is possible to get unused rules since last reboot, but it is obvious the data is in Panorama.  Is there no way to get a list of rules not used since a specified date?

 

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Identify-Un

...

SSaady by L0 Member
  • 3278 Views
  • 4 replies
  • 1 Likes

Resolved! Cannot ping connected adsl modem.

Hi all,

 

i've connected a adsl modem to our 3020 to redirect some clients to,  configured the interface as dhcp client, the port successfully gets an ip address from the modem but i can not ping the modem interface from firewall's cli. I might be miss

...

pa2.png
pa1.png
pa5.png
pa6.png
Oseberg by L1 Bithead
  • 7758 Views
  • 8 replies
  • 0 Likes

Resolved! Line Messenger APP

Hi All,

 

Do we have an application for Line Messenger:

 

https://line.me/en/

 

Cannot see it in Palo database.

 

Thx,

Myky

How to block TCP22 connections

Hi everybody

 

I like to know if there is a way to block incoming connections attemps to port TCP 22.

 

I have an end-customer which has lots of connections to his public ip range 0.0.0.0/24 to port TCP22 but not hit the vulnerability 40015 (SSH User Aut

...

SOC_CSG by L4 Transporter
  • 2920 Views
  • 4 replies
  • 0 Likes

Resolved! How to submit a CSR to Microsoft CA?

Hello folks!

 

I have seen a few articles and documentation for generating CSR and submitting to Microsoft CA for subordinates.  What about just a root stand alone enterprise Microsoft CA?

 

I am preparing to configure a Global Protect portal, generated/

...

microsoftCA_1.jpg
OMatlock by L4 Transporter
  • 1748 Views
  • 1 replies
  • 0 Likes

Research paper shows vulnerabilities with SSL interception

On Feb 2017, some universities, Mozilla, Cloudflare, and Google released this paper on corporate and desktop HTTPS interception.

 

First they figured out how to identify when someone connects to a web server through an SSL interception appliance. Then

...

Maxstr by L3 Networker
  • 3539 Views
  • 5 replies
  • 0 Likes

CLI debug pcap verbosity levels

I've been using the cli debug pcap captures for a number of issues recently but was frustrated in the last one by a lack of detail. In this case I was capturing OSPF (debug routing pcap ospf on). When I viewed the capture it looks more like a summary

...

JWileyR by L1 Bithead
  • 2282 Views
  • 1 replies
  • 0 Likes

Resolved! IPS best practise

Hello all,

 

I configured my security profiles with default seetings ..

 

Is ther any refrence for best practise for IPS and wildfire ??

Miner Data Priorities

Is there a way to have MineMeld prioritize miner data once they get to the output stage? Since some output feeds may be too large for certain firewalls, I want to ensure that our static blacklist is always at the top of the list. Currently new additi

...

groehl by L0 Member
  • 2557 Views
  • 1 replies
  • 0 Likes

How to configure Syslog to send a CEF in PAN OS 7.1.3

I had found this article for CEF on PAN OS 6.0.0

https://live.paloaltonetworks.com/t5/Configuration-Articles/PAN-OS-6-0-CEF-Configuration-Guide/ta-p/59938

 

Do the same rules apply for PAN OS 7.1.3? 

I would need to add "CEF:0|Palo Alto Networks|PAN-OS|7

...

User-ID 8.0 - PKI Setup?

Anybody seen any specific directions on how to setup the new PKI enteprise certs in UA 8.0 beyond the fluffy "whats new" feature section.

 

Also what is the different between UAinstall and UAcredinstall ... Release Notes are silent.

PeterT by L2 Linker
  • 3228 Views
  • 3 replies
  • 0 Likes
  • 23713 Posts
  • 110 Subscriptions
Top Solution Authors
Top Liked Authors
Labels