This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

MSFT Office365 Domain As Phishing?

I was running a 228 PAN-DB version and have since noticed the content version updated. Did anyone else have any issues with Office365 services? ME @firewall(active)> show running url secure.aadcdn.microsoftonline-p.comDP dp0:secure.aadcdn.microsoftonline-p.com phishing expires in 380 secondsDP dp1:secure.aadcdn.microsoftonline-p.com content-...

PA-220 boot Error?

Received this Unit today and on 1st boot, N0.LMC0 Configuration Completed: 8192 MB Warning: Board descriptor tuple not found in eeprom, using defaults KINGFISHER board revision major:1, minor:0, serial #: unknown OCTEON CN7130-AAP pass 1.2, Core clock: 1000 MHz, IO clock: 500 MHz, DDR clock: 800 MHz (1600 Mhz DDR) SPI stage 1 bootloader SPI ID: ...

Resolved! Query on L2 bridging over a L3 network

Hi, We have a pair of PA-500s separated by a L3 MPLS IPVPN network. We require to bridge a layer 2 segment across the two sites. One option we would like to explore is going from PA to PA on a new physical port at each end. We need to bridge HSRP and GRE traffic from third party vendor routers at each site. Does PAN-OS8 have the ability to bridg...

Farzana by • L4 Transporter
  • 3038 Views
  • 1 replies
  • 0 Likes

PA apps

Hi, We are expecting problem with PA identifying apps.We have sessions in port 13000 being identified as play-station network. These sessions are not related to Pstation. On the another hand, we also have sessions in port 80 being identified as unknown-tcp. why PA is idenfitying like this?? how can we solve this app problem??

Resolved! Problems with assiging ip address to vm-50 on hyper-v

I have some problem with assigining ip address and other parameters to vm-50 on Hyper-V.I have downloaded vhdx file of pan-os 8.0 and installed it.but after i set the ip address it doesnt save the setting.i type commit but nothing changes.unknown ip address.

Screenshot_1.png
Screenshot_2.png
Radmin_85 by • L4 Transporter
  • 4004 Views
  • 1 replies
  • 1 Likes

Resolved! Security polices and nat and cluster

Hi So I have a active / active cluster, but I am not sync my VR config. I am connected to an OSPF network lets say my internal network isOSPF int ae1.19 192.168.19.0/24loopback.1 192.168.255.25/32 and 192.168.255.26/32 - ospf routerid (one for each PA)appserver int ae1.25 192.168.25 .2 .3 .1 (.2 & .3 are the router ips, .1 is the HA VIP...

DSRI on IPSec/VPN traffic

We have a rule allowing VPN traffic (IPSec) from our Guest environment. This traffic is non-decryptable. We would like to reduce CPU by disabling Server Response Inspection for this traffic? Do we lose anything from a security perspective if we do so? If there is a change in the application, will app-id still detect it?

Port Forwarding Problem

This should be fairly simple but am at wits end. I need to forward 2 ports from an external IP to an internal private ip (Ports 8088 and 22). I found this article and am following its example: https://nubisnovem.com/pinning-a-hole-in-palo-alto/ Public/Outside IP of PA-220 : 44.44.44.44Internal IP: 192.168.0.222IP I am trying to browse/conne...

PA2.PNG
PA1.PNG
RJSCSLLC by • L1 Bithead
  • 9054 Views
  • 6 replies
  • 0 Likes

Auto reconnect Global Protect

Hello Everyone There are some branch offices which have slow internet connection.Sometimes because of no internet connection for 5-10 seconds Global protect disconnect.Is there any option to automatically reconnect global protect?

Radmin_85 by • L4 Transporter
  • 7942 Views
  • 3 replies
  • 0 Likes

NAT configuration for a Networks (Not) Connected to the Firewall

Hello! This is the scenario and configuration that works on 8.0.3. It is implemented in our company. Servers on public_dmz have public addresses and access Internet with that addresses. Only server with address 2.2.2.10 needs to be translated to 3.3.3.10 in both directions.2.2.2.10 -> 3.3.3.10 Servers from private_dmz are published on the I...

NAT_slika.jpg
mkopcic by • L2 Linker
  • 4523 Views
  • 2 replies
  • 0 Likes

Panorama having issue after after export the tech support via webgui

Hi , I am having the issue after export to tech support file . there was some chnage after that , when commit getting the error "Operation CommitResult FailedDetailsThis config has been sanitized of password data because it was exported by a non-superuser or was part of a tech support export. Please use a non-sanitized config. (see 'phash' fiel...

  • 24452 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks