This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! panorama and clustered PA's

Hi So if your managing a clustered set of PA's with panorama. Do you have "synchronise config set" or unset and let panorama write configs to both ? Is there any thing wrong with having it set and having both units managed by panorama ?

Logs not deleted

Hello Everyone, we are using Panorama to manae our firewalls and logs are forwarded to panorama (except our 7050)Now we set a expiration period of 60 days in panorama under:Panorama > Setup > Management and edit the Logging and Reporting Settings ANDPanorama > Collector Groups However I still see logs older than 60 days. In CLI I see Ex...

Debuging

Hey how can i see debugs of MineMeld such as API calls to the PA for DagPusher , HTTP requests for miners etc etc... thanks

minow by • L4 Transporter
  • 3018 Views
  • 1 replies
  • 0 Likes

indicators and values

Hi, I noticed that when creating the '_process_item' code for a new miner, you generate data as an indicator, and a value. I am able to generate an EDL with my code, but it looks like the values associated with the indicators are not present. Does anybody know what types of feeds you would need to create to see the values associated with...

vb0398 by • L2 Linker
  • 5320 Views
  • 5 replies
  • 0 Likes

Application overrides

Hi So I ran ito the 150 application over rides limit. At my location I have a lot of java app running, they normally provide a http interface a JMX and RMI and https interface. and when you have 15 -20 of these that suchs up a lot of application override I don't want the PA's inspecting the flows. First I tried creating my custom application and...

taxii subscription management error

Hello! I have a problem with subscription to taxii collection deployed in my MineMeld instance. When I try to subscribe to collection or get its status I get an error (cabby taxii client have been used for this request): taxii-subscription --verify no -v --discovery https://xxx.xxx.xxx.xxx/taxii-discovery-service --user xxxxx --password xxxx...

KVasiliy by • L2 Linker
  • 4079 Views
  • 2 replies
  • 0 Likes

taxii data set support

Good morning! I try to add taxii miner for private TI provider. When I commit it I have an error message - "collection xxxxx is not a data feed (DATA_SET)". Could you tell me, does MM have taxii data set support? Thanks!

KVasiliy by • L2 Linker
  • 4313 Views
  • 4 replies
  • 0 Likes

Resolved! New to PAN - coming from ASA - NAT nightmares

Hi guys, I have come from Cisco ASAs whereby it is super easy to create port forwarding/translation - really useful when only have single public IP. object network web-server host 192.168.1.10 nat (inside,outisde) static interface service tcp 80 80 access-list outside extended permit any object web-server eq 80 I am finding this impossibly diff...

Problem downgrade PAN-500

Hi all! i am trying to downgrade a PA-500 from 7.1.7 to 5.0.X.I have downgraded to 7.0.1, but i am nor allowed to downgrade to 6.1.0, when i upload the image file it says 'PanOS_500-6.1.0 already exists', but the only images present are 7.0.1 and 4.1.4 (or something similar). Do you have some hints? Regards,Daniele

DKanta by • L2 Linker
  • 5125 Views
  • 6 replies
  • 0 Likes

Resolved! GlobalProtect protect client upgrade

Well if you saw my last post I have upgrade my PA 5050 from 7.0.12 to 7.1.9 and had a few issues with an Any vs and any in my VPN.I am now needing to upgrade my global protect client. Currently I am on 2.2.0 and not sure what the best version is to upgrade and what version I can directly upgrade too.My plan it to use a test portal and gateway, u...

jdprovine by • L4 Transporter
  • 4258 Views
  • 4 replies
  • 0 Likes

What's the difference between each of Export (backup) options?

Hi all.Under the Device > Operations > Configuration Management section, there are three export options available:1. Export named configuration snapshot2. Export configuration version3. Export device state What's the difference between the three options?In what type of scenarios would you use each option? Thanks.Daniel

Resolved! Ping through PBF Policy intermittently dying

I think this might be related to DoS protection somehow, but I can't find anything being blocked in any of the logs. I'm sure I'm not looking in the right spot, though. We have a normal Internet gateway (default route), and a separate point-to-point connection to a SIP provider. I have a PBF Policy in place that forwards VoIP traffic through th...

fjwcash by • L4 Transporter
  • 3929 Views
  • 2 replies
  • 0 Likes

Resolved! Can't set management interface network settings on 8.0 ESX VM

Hi, I have configured the management interface by logging in to the VM and going into configure mode and executing:set deviceconfig system ip-address 172.18.11.205 netmask 255.255.255.224set deviceconfig system default-gateway 172.18.11.193and thencommit I've tried to ping the default gateway but it fails. Also, I do a "show interface managemen...

rcompton by • L0 Member
  • 5124 Views
  • 3 replies
  • 0 Likes

Resolved! Incomplete traffic: custom appID and QoS

Hi, I have traffic generated by Solarwinds NetPath probes that is tagged by the firewall as "incomplete". I run a packet trace, and after the handshake, there are only TCP-keep-alive packets. I'd like to prioritize this traffic in QoS, currently I'm seeing high latency on NetPath at our busiest sites, and I'm thinking this may be because of QoS...

  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks