General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

 

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

jforsythe by Community Team Member
  • 73 Views
  • 0 replies
  • 0 Likes

Join the Fuel User Spark Event on March 19: Dealing with Threats !

 

Join us at the Fuel User Group Spark Event on March 19!

 

Get ready to ignite your cybersecurity knowledge and connect with industry experts at our upcoming Spark event hosted by the Fuel User Group. Whether you're a seasoned professional or just

...

kiwi_0-1709893724672.jpeg
kiwi by Community Team Member
  • 675 Views
  • 5 replies
  • 3 Likes

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

JayGolf_0-1691518400714.jpeg
JayGolf by Community Team Member
  • 3322 Views
  • 2 replies
  • 14 Likes

Concurrent users cannot connect

Hello,

 

GlobalProtect GW with x-auth is enabled for IPsec VPN client services. However, only one concurrent session per user is allowed and any subsequent sessions disconnects the previous session user. Same issue happens whether the user is a local a

...

Farzana by L4 Transporter
  • 4871 Views
  • 13 replies
  • 0 Likes

Issues with enumerating UPN

Does anyone have any experience with configuring VPN to use the UPN instead of sAMAccountName? I'm trying to get a configuration working using a Radius Multifactor system that requires the UPN, and while I can get that part to work, I can't figure ou

...

Resolved! Testing Performance

I would like to get to know which specifc traffic is being checked by specific features of Palo-alto NGFW. To be more precise after enabling all the features on the device which traffic is being checked by URL filtering , IPS Anti- Spyware and other

...

luk by L0 Member
  • 2368 Views
  • 4 replies
  • 0 Likes

identify interfaces where mtu is being exceeded

Hi, wondering if someone might know how to see counters for flow_fwd_mtu_exceeded for a specific interface. Our firewall's global counter is increasing using this command:

 

show counter global filter packet-filter yes delta yes

 

but I'd like to know wh

...

Resolved! M-100 default log collector

Hello,

 

in the followind doc, Firgure: Single Default Log Collector per Collector Group.

Looks like we can assign Firewalls to send logs to the Primary Panorama, Also it looks like we can assign firewalls to send logs to only the Secondary Panorama.

htt

...

Kaliman by L2 Linker
  • 2691 Views
  • 3 replies
  • 0 Likes

Resolved! Block YouTube--Allow Google.com

We have 1 user who is abusing Youtube. I need to block this person from YouTube but still allow this person access to google.com

I tried a URL filtering policy but it also blocked access to google.com.

Is there a document or a video of how to perform t

...

Resolved! Panorama M-100 - Led Red Alert

Hi, I have a Panorama M100, the device lost connection, neither couldn't be access by console, so we don't make any changes. Then we reboot and connect keyboard direct to appliance and we choose option F1, whit that, the device Started working and re

...

ERROR INICIAL AL CARGAR PANORAMA M-100.png
sdsadasdsa.jpg

Where to put Office 365 dependencies?

I created a security policy for Office 365 using the application IDs. When I commmited, it said that SSL required, but I already have SSL/web-browsing in another policy below.

 

During testing, I found that the 365 policy was not catching any 365 traff

...

Maxstr by L3 Networker
  • 1388 Views
  • 1 replies
  • 0 Likes

No SSL decrypt collaboration

When we try to setup an Skype for Business call we always get blocked by the SSL decrypt of the Palo Alto system.

I would like to configure no ssl decrypt for collaboration. Is this possible and how?

 

ZEBIT by L3 Networker
  • 2077 Views
  • 5 replies
  • 0 Likes

Resolved! Know UserID version agents from Palo Alto

How can i know the version installed in UserID agents server from Palo Alto????

i tried show user user-id-agent statistics but Version shows the protocol version, not the real version client UserID

 

https://live.paloaltonetworks.com/t5/Learning-Arti

...

Template and Devcie Group Design

Hello Experts

 

I have two firewalls cluster, managed by panorama. One cluster is for perimeter firewall and other is core/DC firewalls. I have three customers and I created three vsys (CUST1, CUST2 and CUST3) on both clusters.

 

Now what is the recommen

...

  • 24124 Posts
  • 100 Subscriptions
Top Solution Authors
Labels