General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4125 Views
  • 0 replies
  • 0 Likes

Hot shield proxy- PA unable to block

we have created the application filter for proxy based apps-140+ apps are in that proxy filter which includes IKE, IPSec, Hot-shield etc except SSL. This proxy-based app filter is called in the security policy (with block action). In addition to that, I have added the unknown-TCP, UDP and teredo, etc apps in same security policy. All the traffic...

botnet

Hi,If someone running a botnet inside local network ,is there a way to get an alert like siem, from reports ,from live stattistics ? what are the steps to identify these kind of traffic ?Finally how to block them when threshold reaches ?Thanks

simsim by L4 Transporter
  • 4225 Views
  • 8 replies
  • 0 Likes

DTLS Support

Is there support for DTLS in any version of GP and PanOS? I can't find any mention of it in the documentation.Thanks.

404 error on proofpoint miner

Any ideas on what to do about this error? 2017-04-21T02:25:37 (28250)basepoller._poll ERROR: Exception in polling loop for proofpoint-EmergingThreatsDomains: 404 Client Error: Not FoundTraceback (most recent call last): File "/opt/minemeld/engine/0.9.36.post2/local/lib/python2.7/site-packages/minemeld/ft/basepoller.py", line 701, in _poll perf...

chirss by L3 Networker
  • 3686 Views
  • 3 replies
  • 0 Likes

Integrating MineMeld with IBM QRadar

Hi, I am new to minemeld. I went through the documentation for integrating minemeld with qradar. Succesfully added the TAXII feeds in Qradar. I couldnt see any values getting populated in reference set defined in Qradar or updates shown in threat intellegence TAXII configuration section in qradar. Regards Thanzeer

Terminal Server Agent Installation on Windows Server 2016 (with secure Boot enabled)

Hi, Does anyone managed to install the terminal server agent version 8.0.0 on a windows server 2016 with secure boot enabled?Unfortunately I only get a message (after the installation) when the service is about to get startet that a digitally signed driver is required. Anyone else having this problem or maybe already a solution? Regards,Remo

Remo by L7 Applicator
  • 3227 Views
  • 2 replies
  • 2 Likes

Resolved! Configuring the Proxy-ID for phase 2 IPSec using PAN 6 CLI

there's this great example below for setting up an IPSec tunnel using the CLI. BUT it's missing how to add in the proxy IDs. I have some clues that it's like.. set network tunnel ipsec IPSEC-Tuna-TUNNEL proxy-id tuna1 protocol any Local xxxx Remote yyyy ..but I'm just guessing. Can anyone supply me with the real mojo - perhaps from a cleaned wor...

palomed by L3 Networker
  • 13133 Views
  • 3 replies
  • 0 Likes

Application Incomplete For One Site But OK at Another

I have an IPSec tunnel with source address NATting to a partner. 443 web traffic from site A triggers the IKE and the IPSEC-SA session. In PAN monitoring the application is correctly identified as SSL and in my browser I pull up the site from the partner without an issue. 443 web traffic from site B triggers IKE and IPSEC-SA so that tunnel is o...

palomed by L3 Networker
  • 8314 Views
  • 9 replies
  • 0 Likes

VPN Access

How do you configure the globalprotect VPN's so they won't route on the internal network but will only let users access it from outside the internal network

jdprovine by L4 Transporter
  • 3175 Views
  • 5 replies
  • 0 Likes

Upgrading 7.1.5 HA Pair

My HA 3050 pair is currently running 7.1.5 and I am planning an upgrade spree. The upgrade process that I read seems straight-forward. My main concerns are with IPSEC tunnels and GP clients. My options right now are upgrading to 7.1.9 or just going to 8.1. Has anyone run into any issues with tunnels and/or clients no longer being able to connect...

HA PANs

Hello, I am trying to design a new solution in our network infrastructure. Here's are the requirements: - Single ISP -- Two active Internet circutis --- (Corrected from Two ISPs to a single ISP)- Current topology: Two Internet circutis connected to two cisco edge routers in active/active mode, both circuts are used.- Two core switches: Two co...

  • 24336 Posts
  • 124 Subscriptions
Top Liked Authors
Labels