General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 1174 Views
  • 0 replies
  • 0 Likes

Packet Capture filters not correct

I have a problem once in a while where packet capture filters are not working.  I set up the filters at one point and if I delete the filters and set up a new filter.  Turn packet capture back on and it still gives me captures of the old filter.  I c

...

Getting old PA-200 back in IT life

Hello

i inherited on PA-200 on my new job and want to get it back on IT life. While booting i observed the CLI and this is what i got. Needless to say i have no responces to any command entered.

Is anyone abel to provide some info how to set it up agai

...

Traffic Logs - Multiple IP's

Hi,

 

Is there an easy way to monitor traffic logs on say 20 IP's to see if any IOC's are being hit? I'm guessing I could build a filter for each IP but I was hoping there might be a way to do it easier. These are not contiguous IP's so CIDR won't help

...

Resolved! Looking for screenshots of a bare metal restore on a 2050

I'm developing an SOP and require screen shots for the following steps:

  1. On the ‘Device’ tab, choose ‘Setup’ and configure the following:
    • On the ‘Management’ tab under ‘Management Interface Settings’, enter the firewall’s IP address, netmask, and defaul
...

PAN-OS 8.0.2 URL logs not showing up

Hi guys,

 

I'm running a new PA-VM-50 on 8.0.2 within Esxi.  The VM is fully licensed and has all the latest dynamic updates and URL filtering db.

 

VM License - VM-50
VM Mode - VMWare ESXi
Software Version- 8.0.2
GlobalProtect Agent - 0.0.0
Application Vers

...

Resolved! "Engine Fatal" error message in minemeld

Currently on version 0.9.38 and I'm getting a fatal engine error message. Tried restarting the engine I get this error message. 

 

minemeld-engine FATAL Exited too quickly (process log may have details)
minemeld-supervisord-listener RUNNING pid 1519, up

...

RobertWu by L0 Member
  • 4338 Views
  • 1 replies
  • 0 Likes

SSL decryption for email

Hi,

 

Do we need to enable SSL decryption simply for reading SMTP messages?

 

We have created a profile under Objects and attached it to incoming mail policy but attachments with extension dll, bat, exe file all get through and see nothing in Wildfire su

...

FileBlock.png
Farzana by L4 Transporter
  • 2483 Views
  • 2 replies
  • 0 Likes

Config .XML in the config bundle is empty

Hi everybody!

 

I have a little issue with which maybe you can help me: I have a HA with a pair of 3060s among other FWs managed by a Panorama, when exporting a config bundle from the Panorama, the config XML file for the pair of 3060s is empty. What

...

Carracido by L3 Networker
  • 3166 Views
  • 3 replies
  • 0 Likes

Resolved! Monitor Logs

How do I change what gets logged in the monitor URL logs.. All I see are block url messages.. I need to see all traffic.. Thanks

rmsdip3 by L1 Bithead
  • 3035 Views
  • 4 replies
  • 0 Likes

Check patchs installed HIP

Hi,

 

We configured the HIP module in Palo Alto but is not able to detect patches installed on Global Protect clients sometimes.
There are clients, connected to the VPN GP that if it is able to see the patches, in contrast there are others that does not

...

patch.JPG

How to find source of high open sessions and/or throughput

If your Palo Alto firewall is experiencing an unusually high OPEN session count, and/or high throughput, what is the best way to determine the source or destination at the same time of the event?

 

We have most of our security rules set to log at ses

...

jambulo by L4 Transporter
  • 8090 Views
  • 5 replies
  • 0 Likes

Resolved! web access for local administrators

We have our web access rules setup to match up with AD groups, so if you’re not in an web access AD group then you can’t get on the internet.

 

The issue our PC support guys have is when they log into a PC or laptop as a local administrator they will n

...

Link Failure - Syslog

Hey all!

 

I have a PA-3020, eth1/1 and eth1/2 are an aggregate (ae1).

 

on the switch, it's a Port-channel.

 

I want to be informed when one of both interfaces is down.

 

So I set up a syslog server and all system logs are forwarded.

 

For testing purposes, I

...

MPI-AE by L4 Transporter
  • 1886 Views
  • 1 replies
  • 0 Likes
  • 24170 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels