This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

iSSUE Enabled UsedID agentless in Palo Alto

Hi Team, We configured and using UsedID on our policy. 1 issue i've encountered is sometime PA can't resolve the UserID assigned for specific address. This happens only selective user and other user are fine.Question are:1. What would be the issue when PA can't resolve or just show unknown userid on logs?2. How to trouble and verify whether it's...

Resolved! Can't translate password

Hello, We are unable to commit changes on astandalone PA-200 as is shows the error message. Can't even create local accounts on the firewalls. Anything which uses a password generates this error. Any thoughts on this? Thanks in advance.

Error.png
Farzana by • L4 Transporter
  • 6185 Views
  • 2 replies
  • 0 Likes

SSL Decryption for Chrome Browser

Hello, Below is our Decryption Policy. Using latest Chrome version.Security certificate used by the Palo is from the Windows domain PKI and is already implicitly trusted as this testing is from a domain connected Windows 10 device over Ethernet.It is working fine for IE but in Chrome it is showing like this: If I set the URL Category of Compu...

Decryption.jpg
SSLDecryption.jpg
Farzana by • L4 Transporter
  • 3729 Views
  • 2 replies
  • 0 Likes

Resolved! Query on GP client password

Hello, Is there a way for the Global Protect Client on Windows machines to not save the client password between session? Thanks in advance.

Farzana by • L4 Transporter
  • 3487 Views
  • 2 replies
  • 0 Likes

Resolved! Not licensed for vsys id 2

Anyone run into this one? I have a TAC case open as well.Receiving the following error on a 3060 cluster when trying to add a 2nd vsys. This is not being created on panorama, this is directly on FW01. PAN-OS-7.1.10 Error: vsys2 'vsys2' is invalid. Not licensed for vsys id 2

vsys-pic.png

Resolved! RIYADH

HELLO EVERYONE !! I GOT GENERAL QUESTION ABOUT ACC RISK FACTORIT REACHES 4.0DOES THIS WILL MAKE THE PALOALTO GO SLOW ? AND WHAT IS BEST VERIFIED APPLICATION THAT I SHOULD ADDSO IT CAN LOWER THE RISK . IF YOU HAVE A LIST THAT WOULD BE HELPFUL THANK YOU 🙂

Security policy zones after a source NAT

Hi, I'm migrating my security policy from a netscreen firewall to a Palo Alto firewall. I used the migration tool and I'm currently reviewing the NAT rules, and I'm getting a bit confused about security zones after NAT. - I have 3 interfaces : Trust, Unstrust, DMZ.- I have a public IP range, that has nothing to do with the Untrust interface. My...

Resolved! Example IP and port translation rule?

Hi Folks, Trying to learn a basic port translation example to relate to some work I have, but not working for me so far. I have a basic IIS web server listening on port 80. My security and NAT rule works fine for that.Now, I change my IIS web site to listen on port 8080 (website binding) and change my NAT rule to this below, but does not resolv...

portrule1.jpg
portrule2.jpg
OMatlock by • L4 Transporter
  • 2489 Views
  • 1 replies
  • 0 Likes

wireless intemittent Router connectivity issue

Hi everyone,I have got an Huawei HG8245 wireless router with 40 mbps optical connection on it and as we are in the same room as of the wireless router itself we are connected through wifi and the issue is that when i ping to the Ip address given to the router i.e., the Default gateway there is a intermittent connectivity issue once the packets a...

Resolved! Unable To Connect To MineMeld Output URL Via EDL

Setup an EDL in Panorama to grab a IPv4 feed from a Minemeld (Autofocus hosted) output. Verified the EDL was pushed down to one of our PA-5050's and clicked on 'Import Now' from the 5050. EDL is not able to connect and system log shows following: "Unable to fetch external dynamic list. HTTP response code said error Using old copy for refresh."...

Resolved! PDB-PAN Debugger

Well Team, Hit a keyboard shortcut earlier by accident and this populated. Can't find anything on the web about it or community. Know there was another way to debug the gui , https://[ip]/debug but never seen this. Took a picture and can't replicate what ever shortcut populated it 🙂 PAN-OS 8.0.3-h3 -> happened on a VM-200. Is it a new fea...

IMG_0024.JPG
img-0025.JPG

pa-3020 with 3ISP, how to utilize all ISP Bandwidth effectively

I configured the PA-3020 with 3 ISP as below1. ISP1-2Mbps DIA2. ISP2-20Mbps DIA3. ISP3-200Mbps DSL I want to configure the PA as below ISP1 for VPN accessISP2 for Business applications traffic with QoS (like outlook traffic and etc.)ISP3 for general browsing Please suggest. Thank youMohammed Ali

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks