This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Not able to connect Global Protect VPN on IPAD device

Hello Friends, We have a customer who is not able to connect Global Protect VPN from IPAD device with error "could not verify the server certificate of the gateway" I revived the configuration and selected connection method as on-demand in the app setting of GP Portal and did commit. After commit, we were getting error "the network connection ...

Resolved! VPN tunnel question…

Hello, I am trying to find out the logic about this scenario. If we have an ikev2 tunnel, and only a single /32 route in the routing table to reach the tunnel peer (assume dynamic routing for encryption domain), and for some reason that route gets retracted from the routing table, does the tunnel only go down once liveliness check fails, or ...

VK9H13 by • L2 Linker
  • 1333 Views
  • 1 replies
  • 0 Likes

Bug Search Tool

I'm new to the PA product and website (I have active support contracts and a valid login to the support website)Where can I find the bug search tool on the Palo Alto customer support website?I'm trying to find the text of a specific bug and what release it was addressed, or what the target fix release will be.(PAN-62675) Thank You,Eric Davis

Resolved! request sc3 reset API

Does anyone have the XML API syntax for the "request sc3 reset" commands on the local firewall. request sc3 reset debug software restart process management-server If not I guess i will gather it with the debug cli on. But was hoping someone could save me a step 🙂

List of System OIDs

I'm looking for a list of System OIDs. I have a number of PAs that are not being discovered with their proper model type. The set of devices are polling with a generic SYS OID. And I'd like to reconfigure the PAs to reflect their model type.

discrepancy regarding web-browsing ports between applipedia and Pan-OS application

Dear community! Did you notice that there´s an discrepancy regarding web-browsing ports between applipedia and Pan-OS application? If you check for web-browsing details in the firewall you see standard port 80 and secure port 443. In the applipedia you can see only standard port 80 associated to the web-browsing application: This can ...

Carracido_0-1702310451713.png
Carracido_1-1702310730558.png
Carracido by • L4 Transporter
  • 2926 Views
  • 4 replies
  • 0 Likes

Resolved! PAN OS REST API

I am just starting out and learning automation. I am using PAN OS 10.2 on PA 820 lab device. When I try to use a use the GET Method to query addresses, the restapi-doc shows: https://10.x.x.x/restapi/v10.2/Objects/Addresses . I don’t see the “"Invalid Query Parameter: key". Could it be that my API key is bad or invalid? Below is my curl ...

Amin2 by • L2 Linker
  • 3009 Views
  • 2 replies
  • 0 Likes

PA Antivirus content updated Signatures not able to view on Panorama Antivirus profile

1. The issue is that customers are unable to see the signature exceptions of the Antivirus security profile in Panorama and firewall, but they are able to see the exceptions of other security profiles, so you need to check on the same. 2. First, we checked for this behavior and tried to manually upload the signatures and it was added successfull...

Resolved! SSL Decryption Auto Tag URL to No Longer Decrypt

Hi, I am working to get SSL decryption built in our environment. I have policies I want to start with. NoDecrypt_ByDestination (add sites as needed to dst and has NoTLSDecrypt-grp) NoDecrypt_BySource NoDecrypt_ByCategory (financial-gov-health-legal and custom URL Object Do-Not-Decrypt) TLS_Decryption - actual decrypt rule What I'd like to s...

Resolved! commit confirmed X on PaloAlto firewall ?

Hello All, I am a newbie to PA firewalls but have some experience with JunOS firewalls. I like the "commit confirmed XX" command on JunOS because it will revert a change after XX minutes if for some reason I get locked out. A good example is when changing speed/duplex on an edge firewall that I may get locked out of. Is there an equivalent com...

Cisco SFP-10GB-LR in PA-3430

Hi All, Has anyone tried this yet and does it work? to use a Cisco SFP-10GB-LR module in a PA-3430. yes I am aware of the support aspect around not being true palo branded, but time is of the essence and I need a quick solution as the Palo branded SFP is 5-6weeks leadtime and cannot wait that long.the Cisco SFP i have some spares but not close...

PA_nts by • L4 Transporter
  • 4642 Views
  • 3 replies
  • 0 Likes

Website works in Incognito but in normal browser

Hi Team, We have issue with the Videos playing in Normal browser. But it works fine with the Incognito Mode. This traffic passes through the Prisma and i dont see any issues as such which could relate this issue. Any one faced this weird issue before, if yes please suggest the solution you implemented to get through this? Regards, Sanjay S

Issue with PA-1410 platform disk size

Hello Team, Recently we have deployed PA-1410 in our datacenter and since first day we are having issue with disk space in loggin. and after contacting the support, logging is not more than a week which is not accepted from our side. I know that the PA-1410 disk is 128GB. Did any one met with a similar issue? what was the solut...

Need to block chrome-remote-desktop from outside coming in

I've been on this project for a few days with no semi-success. i have a PA VM-200. I've used the built-in 'chrome-remote-desktop' protocol, and doesn't work. The description seems to say this protocol is in BETA and is for the support function fo the chrome-remote-desktop. ive tried blocking the following ip addresses/networks172.217.0.0/1621...

source-ips.jpg
service-url Category.jpg
log1.jpg
log2.jpg
b8cons by • L0 Member
  • 14700 Views
  • 2 replies
  • 0 Likes
  • 24442 Posts
  • 125 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks