This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Some BFD through the firewall not forwarding

I have multihop BFD session between two zones through a 7050 firewall. Sessions originating from zone A to zone B work fine. Sessions originating from zone B to zone A do not work. Policies exist. There is a valid session in the session table with one way traffic. Log shows the traffic was allowed. This affects both IPv4 and IPv6 BFD peerings in...

Resolved! GlobalProtect OCSP URL location with Offline Root CA and Enterprise Subordinate CA

Hi guys, We are using Certificate Authentication Profile for Pre-Logon and then Username and Password before VPN can be established. GP is working fine and we would like to validate when certificate is revoked, it will stop the machine from connecting. In our environment we have an Standalone Root CA and Enterprise Subordinate CA and the URL loc...

ESutedy by • L1 Bithead
  • 7668 Views
  • 4 replies
  • 0 Likes

Manual URL Sample Uploads

Hello, Anytime I try to upload a Webpage sample in Wildfire, I never receive any hits on it even though the portal says the upload was successful. Manual file uploads, I always receive a verdict, but its never the case with web pages. Any thoughts on why I can't see any reports on manual web page sample uploads? Thank you

Resolved! DHCP and DDNS Configuration

Hey All, I received a question from a client this morning, who is migrating their Cisco ASA to PANW. The Palo Alto will act as a DHCP server for a couple zones on the network. He wants to know if PAN has a similar feature as the ASA to support Dynamic DNS, where the DDNS update integrates DNS with DHCP. According to the below article the two pro...

Resolved! List of the compatible SFPs and RJ45 SFPs for the PA-3050

Hi Guys, I am looking for the list of the compatible SFPs and RJ45 SFPs for the PA-3050. Checking the link below it is not clear. https://live.paloaltonetworks.com/t5/General-Topics/List-of-compatible-SFP-modules-for-PA3020/m-p/24288/highlight/true#M17704 Please, ould you advice where can l get this info or if somebody can share it. Th...

Ping Feature in UI, not CLI

hi, is the ping feature available in the UI, or at least on the roadmap? we have users that don't allow SSH to the box and they need ping to refresh arp entries to the hosts or basic t/s. thanks!

ROHO by • L2 Linker
  • 2822 Views
  • 3 replies
  • 0 Likes

Resolved! Copy configuration between different platforms

Hello, We are about to upgrade our PA500 to PA220.We have 2 in HA, both running 7.1.9 and a panorama running pan OS 7.I was wondering is there a way to copy the configuration from the pa500 to the pa220? Kind Regards, Carl

Resolved! Inbound NAT with Port Redirection

Dears, I want to publish a web server to the internet over port 443 and direct the inbound traffic to the port 80 on the server. How that can be done in both PAN OS v7 and v8 ??

Ammar by • L2 Linker
  • 4032 Views
  • 3 replies
  • 0 Likes

Resolved! Service Route Configuration

Hello, we currently use the management interface for all under service route configuration but we want to start using a different interafce for getting updates for PA software, Wildfire etc, if we customize and make the changes to the required services, the other services not changed will be "use default" (source interface and source address), ...

global-protect client can't connect

Hi Team, I am stuck in a situation. Whenever GP-client tries connecting to Firewall, it is stuck in between and then disconnects. 1. Client is able to connect to portal and download certificate.2. I can see when it gets disconnects, i.e discovering network-->> connecting --> disconnects. I have checked everything at my end. Kindly advis...

kunal_19 by • L1 Bithead
  • 22031 Views
  • 5 replies
  • 0 Likes

HA in AWS deployment error message

Greetings, I am deploying a pair of VM Series Palo Alto's in AWS. Pretty much have a handle on the set up for HA. In AWS eth0 is the management interface and is provided by DHCP. After setting up for HA and committing the config I get the following error: High-availability ha1 can't be configured with port 'management' and have an IPv4 peer-i...

Gaming PCs and Consoles with DIPP NAT

Hi all, I've been researching this for a while now and I've also opened a case on the issue. Basically we just moved off of our Cisco ASA platform and on to our Palo Alto and I've run into a snag with gaming devices. We're a university with quite a few on-campus students and they understandably want to be able to use their entertainment device...

jsalmans by • L4 Transporter
  • 14685 Views
  • 16 replies
  • 0 Likes
  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks