General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

PAN-SA-2017-0010 - INFORMATION DISCLOSURE IN THE MANAGEMENT WEB INTERFACE

Hello I detected a bug PAN-SA-2017-0010 - INFORMATION DISCLOSURE IN THE MANAGEMENT WEB INTERFACE in the environment palo alto that I support . would you give me some recommendation/workaround ?

Resolved! Google Play Store Problem

Dear Members,Am here a new member, please I wish to know how to block only the google play store.If I try to block only that with google base application, other traffics also blocked.Let me know how to block only google play store.Regards,RKV

Resolved! Multiple Response Pages

Does anyone know of a way to make multiple response pages for different user groups. Specifically the URL Filtering and Category Match Block Page? Essentially what I'm trying to do is create two different responses; one that will tell you your request was blocked because of policy, and the other one will simply block the traffic and display a b...

palo alto firewall insufficent data in traffic Logs

I see lots of enteires in regards to Insufficient-Data but how does one go by troublshooting them? I understand the definition btu is Packet capture the only way to get reason for it? Considering I have a any port any service rule I wouldnt expect too see it

Resolved! How to check drops on PA-500 due to performance limits

Hello! Is there way to check session/packet drops on PA-500 due to performance limitaions? Scenaro:There is PA-500 appliance, that provide internet access to +2000 users with agentless integration with AD. Management CPU average load is about 70-100 %Data plane CPU: 40-60%Session utilization 40-60% Main internet-access rule has Threat-Prevention...

SSL Decrypt Problem with Chrome

Hello all, We are having some problems with SSL Decrypt with Chrome. When we try to connect to some pages appears certificate error that I attached. I have PanOS 7.1.8 and only occurred this with Chrome. Know somebody how I can fix this problem ? Kind Regards

Resolved! PDF Summary Reports - How to increase the "TOP" hits in the TOP Denied Sources

Hello Experts,I have a Daily Summary Reports where i have the output for almost 16 sources (meaning daily summary data on Top Connection, Top Destination countries, etc. etc). I noticed that it only displayes the "TOP 5", is there a way i can increase this? Perhaps even just for a single report (Top Denied Sources). My objective is to see the to...

Resolved! Expected behaviour for Null, FIN and XMAS scans

Running through a few very basics tests to prove Zone Protection etc with a customer, what is the expected default behaviour for reconaissance scans such as Null, FIN and XMAS scans? Currently I can get the following nmap commands to run without issue and no logs beyond ping or icmp.nmap -sXnmap -sFnmap -sN What would be the appropriate measure ...

Resolved! 30-days demo license

How to get 30 days URL-filtering and Threat prevention license for PA-2050-NFR

Resolved! GP Server Certificate Verification Failed

Hey guys, I wanted to upgrade the Global Protect Version. Currently, I have version 2.3.4 in use an everything works fine. Now I have a new mac with 10.12 and therefore I need version 3.1.1 of GP. So I activated it on the firewall, installed it on the mac 10.12 and now there's is an error: "Server Certificate Verification Failed" I'm not able to...

Resolved! Commit error

I'm getting an error when committing on an instance I had spun down for a year and then upgraded yesterday when spinning back up. Looking in logs it looks like it's having problems resolving one of the miners but I'm not positive. Any thoughts on how to troubleshoot this?

PA Default Behaviour for un-matched UDP traffic?

Hello, I am pretty new to PA firewalls, and started looking at the default firewall behaviour for various kinds of traffic.Hence wanted to know, what happens when PA sees unmatched UDP traffic, say a DNS reply, from outside for which it doesn't have a DNS request recorded from the inside? Does it drops the incoming DNS reply or does it allows it...

Resolved! Offline Filtering Options

Is there an offline agent/option that will filter URL traffic when an end point is not routing through the Palo Alto? We have several company provided laptops that we want to secure when users take them home.

Configuring User-Id With Radius

Hello Dear Community, I have a client who wants view user-id users name of the radius server on Palo Alto Logs (Like happens with LDAP Active Directory) The SO of the Radius Server is Windows Server 2008. I saw there is a link on Palo Alto KBs to configure the user-id for Radius users from the Syslog Server: https://www.paloaltonetworks.com/docu...

Increase system log output shown in GUI

How does one set the the GUI to display more than a handful of system logs? For example I wand to see last 60 from GUI

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!