General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 1959 Views
  • 1 replies
  • 11 Likes

how to edit subinterfaces in XML config

Hello

 

I need to modify my config. Now its looks like:

I need to "move" ethernet 1/4.111  as a subinterface ethernet1/7, and all polices and other related objects.

 

SO I opened in editpad lite my config and I try to move part od config related to this s

...

2016-09-20_210651.png
2016-09-20_211159.png
_slv_ by L4 Transporter
  • 3194 Views
  • 5 replies
  • 0 Likes

Resolved! System crash leaves stagnant pidfile

In my setup if I have a os/system crash, it leaves behind a stagnant pidfile. This makes sense. However on startup minemeld is set up to start at boot/runlevel 3 or whatever run level. It seems the stagnant pidfile does not in fact get cleaned up so

...

chirss by L3 Networker
  • 3620 Views
  • 5 replies
  • 0 Likes

Resolved! Azure s2s between PA keeps restarting after 5min

Hello,

 

i couldn't find answer to this anywhere even thought i found similiar problems. I followed this guide on how to set up vpn between Azure cloud and PA device: https://live.paloaltonetworks.com/t5/Integration-Articles/Configuring-IKEv2-VPN-for-M

...

Janusz by L1 Bithead
  • 6299 Views
  • 10 replies
  • 0 Likes

Palo Alto not booting

I've got a PA-2050 which is having issues with booting up. Worst is that I've got no support on this device.

 

This is how it looks like when it boots up:

 

Welcome to the PanOS Bootloader. U-Boot 4.1.14.0-0 (Build time: May 30 2013 - 16:56:05) BIST che...

shyamraj by L1 Bithead
  • 8026 Views
  • 5 replies
  • 0 Likes

Resolved! some help needed with CLI show command

Hello

 

I'd like to copy my config to file.

So I connected by PuttySSH, changed  Session>Logging to file to Printable output

Logged and lunched:

set cli config-output-format set

configure

show

 

but in every 40 lines add "lines 1-40" next "lines 41-80" "lines

...

_slv_ by L4 Transporter
  • 3186 Views
  • 2 replies
  • 0 Likes

New Global Protect 3.0 is not good enough

I was looking forwad to the 'new and improved' Global Protect. 

 

I am still very dissapointed at how it works from a UI standpoint. 

 

When I am connected to the VPN how do I disconnect? Is there a button hiding around in this awful GUI? The only wa

...

OrN8ikM.png
original.png
pmc by L2 Linker
  • 18769 Views
  • 41 replies
  • 14 Likes

Configuring a Zone Without Interfaces

It is possible to configure a zone without any interfaces specified? 
Will the rule containing this zone be applied ?

Will traffic that match this rule be accepted from any source and destination interface? 

shaunyt by L0 Member
  • 2958 Views
  • 4 replies
  • 0 Likes

SSL Inbound Inspection and SNI

Hello,
I need to implement SSL Inbound Inspection for protect my web server. I have PAN OS 6.1x

I have two question:

1) I have many websites behind same public ip, because I use SNI on my web server. How how can I do on the PAN ?

2) I see thath PAN decry...

Turn off logging when high load on data plane

I think I read something that said you can configure the PA to shut off logging if the dataplane was running a very high percentage of load and I would also like to be sent an alert if anyone has any information on this process.

jdprovine by L4 Transporter
  • 6048 Views
  • 6 replies
  • 0 Likes

Resolved! Reloading Config: Internal Server Error

So I just installed minemeld this morning so bare with me as I don't really have everything down yet. The issue that I currently ran into is that when I go under the Config tab I immediately receive an "Error Reloading Config: Internal Server Error"

...

BPry by Cyber Elite
  • 13680 Views
  • 11 replies
  • 0 Likes

Resolved! PANOS HA A/A; catch east/west traffic of multiple vlans

Hi community,

See attached visio.

And supplied notes.

 

There is no reason this won't work ?

 

The reason for this is to,

- Capture east/west 'inter-vlan' traffic that would normally be routed by L3 switch carrying SVIs, aka move the 'SVIs' up to the PAN. 

...

PAN deployment.png
mpgioia by L3 Networker
  • 1945 Views
  • 2 replies
  • 0 Likes