General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Aggregated port over Vsys (AE1 over...)

Hi, 

 

I'm thinking about put som vlans inside and Aggregate, and distribitute over various Vsys, as far I know, reading here in the community, it's possible use subAEinterfaces on different VSYS.

 

Then, the question is, on wich VSYS must be the physica

...

nanukanu by L2 Linker
  • 2042 Views
  • 4 replies
  • 0 Likes

Flood protection

What is the best way to set up flood protection, separate profile one for ICMP, one for SYN cookies etc or put it all in one policie? What is the best way to determine what set your alarm rates, block rate etc? How successful is it, does good traffic

...

jdprovine by L4 Transporter
  • 5096 Views
  • 15 replies
  • 0 Likes

Ip missing in output

 

Hi,

 

I have default profile.

 

I added a node "RW_IPBL NODE"  that has 11464 ips

 

But after processing I only see 900. Generated I think by other nodes.

What can be wrong?

 

Thank you

Screenshot_5.png
Screenshot_6.png
Screenshot_7.png
Screenshot_8.png

MineMeld and dinamic list in Pa500

Hi,

 

We have a Pa500. It read that only permit 10 list with a max 5000 ip's.it is right?

 

I have deployed a MineMeld with default configuration. I have a list configured in Pa-500 https://ip-minemeld/feeds/inboundfeedhc.

 

 What does the pa-500 to
...

Screenshot_2.png

License for SSL VPN (GP Client)

Hey guys,

 

We have a PA 200 as lab firewall and I want to setup SSL vpn.

 

Can you tell me which licenses I need for it?

 

The GP window (Device -> GP Client) is completely empty. When I check for new versions, it says "The device does not have support".

 

...

LIC.PNG
MPI-AE by L4 Transporter
  • 2855 Views
  • 3 replies
  • 0 Likes

group mapping lost suddenly

Seems like a bug any one faced in 7.0.9. We have several firewall and 2 time it happened group mapping lost suddenly and we have manaually refresh to get it it back.

 

Resolved! Processor Descriptions

I know I've seen an article/documentation on this somewhere, but I am struggling to find it.

 

When running a show system environmentals, and more specifically the "Thermal" area for the processors, does anyone know what functions are being handled by

...

change webcertificate

Hi,

 

Testing with Rome release I notice we need to have trusted CA on the Minemeld webserver. You can't use the Minemeld default certificate to import on the PA firewall.

So I had to manually change certificate in the NGINX. 

Maybe this could be inc

...

Policy Rules order

Hi there,

 

if we are going to the tab "Policy" we will see 7 different sub tabs. The tabs are:

 

Security

NAT

QoS

PBF

App Override

Captive Portal

DoS Protection

 

So I know for example that Security rules are always checked before NAT rules but whats about the

...

Rboehme by L2 Linker
  • 2678 Views
  • 3 replies
  • 0 Likes

Resolved! SMTP Inbound Decryption

We have decyption turned on for inbound smtp trafffic. It is only decrpyting a portion of the encypted traffic.  I have an open ticket with support but still working through it but I wanted to check to see if anyone else is experiencing issues. I do

...

Capture_decrypt.PNG
clewis1 by L3 Networker
  • 3033 Views
  • 2 replies
  • 0 Likes

Palo alto networks Problem Session out

Hello ,

 

I have a problem with my firewall PA-200. When I try to open the GUI , I found an error message with a session out . You can find in the attachement this error message .

 

I read that may be this problem can be related to the disk space. I do a

...

Session Out.JPG
disk-space.JPG
Mariaa by L1 Bithead
  • 2116 Views
  • 4 replies
  • 0 Likes

Resolved! ARP table cache "incomplete"

Hello All,

 

Need some clarification on ARP table. For some reason, once we swapped the devices from 2020>3020  our ARP table is seen as incomplete but services are working fine withing on that particular external subnet (before they did but we use gra

...

ARP entries_hidden.PNG

Concurrent users cannot connect

Hello,

 

GlobalProtect GW with x-auth is enabled for IPsec VPN client services. However, only one concurrent session per user is allowed and any subsequent sessions disconnects the previous session user. Same issue happens whether the user is a local a

...

Farzana by L4 Transporter
  • 5484 Views
  • 13 replies
  • 0 Likes
  • 23573 Posts
  • 103 Subscriptions
Top Liked Authors
Labels