General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience.

General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 478 Views
  • 0 replies
  • 2 Likes

Unable to commit

I have a PA-200, managed by Panorama and running 7.1.7. All of the sudden I can no longer commit to the firewall, and I get the error:

 

Details:

. Internal error during commit processing
. Commit/Validate failed. Invalid configuration.

 

Logs on the firew

...

Skype no audio with allow rule

Dear Team,

 

Recently we have experianced a skype no audio issue with the latest skype version. We have allowed skype and skype-probe to a test PC and still we have no audio. But when I do a any application allow then we get clear audio. However, with

...

Panorama CLI Help

Trying to script some panorama configuration and trying to figure out how to do the following:

 

  • Is it possible to add a managed device to Panorama from the CLI
  • Is it possible to create a template-stack from the CLI?

Resolved! feed authentication with PAN-OS 8.0

I have enabled feed authentication on our MineMeld Server:

https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Minemeld-Feed-Password-OR-api-security/td-p/131716

 

I did a quick test with curl and it works as i expected.

 

Unfortunataly our PAN

...

panos.png
faeppli by L1 Bithead
  • 4856 Views
  • 2 replies
  • 0 Likes

gamenet.ru false-positive

Hello,

I represent GameNet technical support service (www.gamenet.ru). We are designed an application QGNA for our customers (over 10 000 000 people) for game launch.

Direct link for test on VirusTotal:
https://www.virustotal.com/ru/file/6f6f19e994c1c

...

Resolved! Monitor subinterfaces and get NetFlow statistics

Hi,

We have a PA-5020 and configured a few AGG interfaces with subinterface; recently, we installed a SolarWinds NTA to get NetFlow statistics, but I am not able to get anything from this device.

I have created a profile and applied to the subinterface

...

MMCiobanu by L3 Networker
  • 11227 Views
  • 20 replies
  • 0 Likes

Resolved! blocking apps on non-default ports

Hi,

 

Sadly don't have PA to play around at the moment, so have to pass this question for all you out there as I'm sure I cannot be first one with such an idea.

 

What is the best way to block apps on their non-default ports?

Basically, allow apps ONLY on

...

nikoo by L3 Networker
  • 3659 Views
  • 4 replies
  • 0 Likes

Resolved! Can I enforce security based in AD Computer groups yet?

I see history here indicating the user-id agent has been blind to computer names when the group membership is added to user IDs.  The CLI DOES show the computer name as a userID (with a post-pended $) and the groups are mapped correctly to the comput

...

JWileyR by L1 Bithead
  • 3487 Views
  • 3 replies
  • 0 Likes

Anti-spyware Profile Rule category explanation

Does anyone have some document that explain the different categories in Anti-Spyware profiles? They're kind of self explaining, but does anyone have a document similar to the URL category explanation?

 

Thanks

17098052_10207743432858343_7241440398395006066_o.jpg
gtomte by L3 Networker
  • 3795 Views
  • 4 replies
  • 1 Likes

Resolved! FTP Protocol Injection Bypass Palo Alto Firewall

Hi 

 

About  News SMTP over XXE attacks against Linux-based firewalls.

- link (https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/)

 

How we can create custom signature or  disab

...

Resolved! User-ID. Is WMI really needed?

Hi all

 

I have an end-customer who is using ServerMonitoring and User-Id agent at the same time. His AD has been audited by Microsoft and discovered that their performance is affected by thew WMI probbing. My questions is. If they remove all ServerMon

...

SOC_CSG by L4 Transporter
  • 4455 Views
  • 4 replies
  • 1 Likes
  • 23708 Posts
  • 110 Subscriptions
Top Liked Authors
Labels