This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4116 Views
  • 0 replies
  • 0 Likes

Resolved! Dynamic Updates on PA-200

I have a PA-200 that is configured to check for updates every half hour aprox. The thing is that Antivirus, Aplications and Threats are not installed as scheduled!!! When I log in to check, the check to Internet is done, but the package is not downloaded or instaled (in schedule task action in both is download-and-install) If I do it manualy, ev...

Two-Factor authentication failures

Hi, we have a few clients using GlobalProtect as VPN (various versions), some are authenticating using 2FA, using SecurEnvoy as a RADIUS server. What we're seeing is as follows - the user has an authenticated VPN connection, then their network connection drops for some reason (they put the laptop to sleep, their wireless goes off, etc. etc. - th...

A.Mellor by • L0 Member
  • 3711 Views
  • 1 replies
  • 0 Likes

Resolved! Non-interruptive Panorama device migration

Hello!Is there any way to perform migration of local configured firewall to panorama management without service interruption?For example:I use Panorama 7.0There is configured PA-5060 6.1.5 HA-cluster that I need to migrate to centralized Panorama Management.Using this tech-note https://www.paloaltonetworks.com/documentation/70/panorama/panorama_...

Minemeld - Cannot create new Miner Node

Heya All, I've been testing out minemeld and have it a bit of a brick wall.. When I attempt to create a new miner node via CONFIG > NEW, it completes successfully but the node cannot be found listed under nodes so I cannot add it as an input to the inboudaggregator. I have reviewed all the log files and couldn't find any relevant errors.....

Resolved! Filter items from source feed

One of the feeds I would like to import is the alienvault feed. However, I only want a subset of the IPs listed. I have tried using a regex with a transform to limit the results, but the miner is still showing an indicator count of 54,000. I cloned the alienvault prototype and changed it to this: my_alienvaultreputation: class:...

deanm by • L2 Linker
  • 10678 Views
  • 11 replies
  • 0 Likes

Resolved! HA configuring questions?

Hi folks, A couple more questions about HA, if you please.Hopefully my post frequency will reduce after training next week.(Yes, configuring HA just before the training this weekend) I will configure HA on an existing running production PA-3020 and then add a second as Passive.There should be no network loss or downtime associated with the HA co...

OMatlock by • L4 Transporter
  • 5680 Views
  • 9 replies
  • 0 Likes

Resolved! Bootsrap Image Error

Hi All I am seeing the following in the system log of a PA-200 on reboot: critical hw bootstr 0 No bootstrap media detected I can't find any reference to this message anywhere and indeed all the errors that can be ebcountered while bootstraapping are all severity high, rather than critical:https://www.paloaltonetworks.com/document...

Export Configuration

Hi, It is probably very simple thing.. I wish to retrieve full configuration of Palo Alto firewall to build new firewall which will NOT be managed by Panorama. Could someone please suggest me procedure or command on how to retrieve (via web or cli - xml or set format) full configuration (local and shared – both together) from Palo Alto firewall ...

session QoS rule

Hi,i have created a qos rule for skype and assign class which is real time ,When I look in to the session details I could not find the session qos rule . How to interpret the details ? for example like flow1 c2s and flow 2 c2s and PREDany related documents Thanks

skyp.jpg
simsim by • L4 Transporter
  • 2404 Views
  • 3 replies
  • 0 Likes

Resolved! Policy application question

Hi So I created an application TEST HTTPS tcp/443TEST HTTP tcp/443 and a policy from any where to 10.10.10.10/24 application TEST HTTPS & TEST HTTP allowand then deny everything else if I go to my test box say 10.20.20.20/24 (different network), presume I can ping. I run telnet 10.10.10.10.443 it connects and i type GET /This will fail, bu...

Migrate from Check Point to PaloAlto step by step

Hi guysI have some document that I made about migration from CP to PA,Please feel free to contact me if you had some issue with that migration.If you want the PDF file, please check the following link:http://zwerd.com/2017/09/05/paloalto-migration.htmlAnd also share with me your expariance!:]Good lock Guy.Zguy.zwerdling@gmail.com

Document-page-001.jpg
page2.PNG
Document-page-003.jpg
Document-page-004.jpg
guyzwe by • L0 Member
  • 3723 Views
  • 1 replies
  • 3 Likes

7.1 default behavior changes

So I was reading about OS 7.1 because I am planning on upgrading from 7.0.12 to 7.1 and found some information of the default behavior of app-id

appid.PNG
jdprovine by • L4 Transporter
  • 5736 Views
  • 12 replies
  • 0 Likes

Resolved! Path Monitoring question?

Hi folks, Preparing for my HA configuration this weekend. 🙂 I have a question about creating a Path monitoring group on the Passive device. While I go through the procedures to configure HA on the Active device, I plan to set a Path monitoring group for our virtual router named SDTSS. When I go through the same procedures on my Passive devic...

OMatlock by • L4 Transporter
  • 3086 Views
  • 3 replies
  • 1 Likes

Finally IPv6 over GlobalProtect, or should i say v6IP?

About 2 months ago I was thrilled to hear that PANOS 8 was coming out and that it would bring us IPv6 inside a Globalprotect VPN. After fixing the "licence issue", i finally came arround to doing the upgrade and eagerly started to configure a tunnel for IPv6. To my regret it did not work. As I figured it, it would probably be some remote setting...

P.Braat by • L1 Bithead
  • 5170 Views
  • 6 replies
  • 0 Likes
  • 24334 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks