General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Gaming PCs and Consoles with DIPP NAT

Hi all, I've been researching this for a while now and I've also opened a case on the issue. Basically we just moved off of our Cisco ASA platform and on to our Palo Alto and I've run into a snag with gaming devices. We're a university with quite a few on-campus students and they understandably want to be able to use their entertainment device...

jsalmans by L4 Transporter
  • 14949 Views
  • 16 replies
  • 0 Likes

Resolved! Packet drop counter increment normal?

Hi folks, We had a Lync meeting yesterday that was reported with poor performance and dropped calls.The Lync Monitor dashboard indicates dropped packets and jitter in that time frame.I checked the Lync server and the LAN switch its ESXi host is connected to, no alerts or reports of packet loss. I see that all of our PA 3020 interfaces have a pac...

PAdrops3.jpg
PAdrops2.jpg
OMatlock by L4 Transporter
  • 5892 Views
  • 3 replies
  • 0 Likes

OSPF with HA HA virtual ip

Hi So I have an interesting situation active active setup loopback.2 setup with a failover ip. How do I add the ip to OSPF, because 1 interface will not have a IP address, so comitting it complains

Frustration with Panorama

Hi So I am trying to use templates with panorama. I have 3 devices. and I have a based template - standrard message and other things. One of thos things is Authentication profiles, I have a standrad one that points to some LDAP servers. But I am trying to attach my GP portal to it. but it it defined in my device template. So i create a dummy au...

Blocking YouTube channel - looking for working solution

HiI'm trying to block all YouTube channels and allow to pass only few of them.For first look it should be easy, one rule for passing allowed channels and second rule for blocking all other channels.But it doesn't work .Youtube of course use URL to open channel but later downloading streaming from others addresses .Not sure how to isolate address...

Animex by L1 Bithead
  • 16089 Views
  • 12 replies
  • 0 Likes

Youtube API Integration

Suggestion here to create a miner for Youtube using their API. This would allow whitelisting or blacklisting a specific channel and all associated resources. Eg: You can identify each channel based on URL, but not the videos as these have their own URL with no mention of the channel. The youtube API allos for retrieving all resources URLs...

Threat Alerts

I have configured Threat alerts to be emailed. This is working, however I'm getting information level alerts. I have setup a filter to only mail critical or high. I built this filter under objects/log forwarding, then log type threat. Is this the correct location? I would like to not see any log lower the medium level. How do I stop getting info...

Device Authentication with Azure AD

We have setup an Azure AD environment with some test machines that are Azure AD joined, but not joined to our on-prem AD environment. Our PA certificate is installed on these machines. For a time PA correctly identifies these machines with the correct username. But after a while, it no longer does. This can be temporarily fixed by release/renewi...

Route Public IP range through Shared Gateway

Hi guys, I hope you can lend me a hand here. Our ISP finally allocated us a Public /25 (aa.bb.cc.0/25) subnet which will be routed via the existing /30 (xx.yy.zz.2/30) internet link that we have. We want to split it in half and use the Shared Gateway to route the traffic. The first half is for our webservers in VSYS1 . The other half is for offi...

  • 24446 Posts
  • 125 Subscriptions
Top Solution Authors
Labels