This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4403 Views
  • 0 replies
  • 0 Likes

Impossible to migrate an ae interface to a different speed in Panorama?

Quite new to Panorama, but have been working with Palo Alto standalone firewalls for a little while. Client has 2 Active Passive HA FW's in Panorama and an ae1 interface with 4x 1G interfaces as members. They want to switch this to 4x of the 10G interfaces during an outage window. Am I right that I should be able to just remove the 4x 1G membe...

"Only self signed CA cert can have identical sub and issuer fields" when uploading a certificate

This message appears when uploading an external CA certificate to the sistem. "Only self signed CA certificates can have identical subject and issuer fields". It's a Microsoft-adfs autosigned CA certificate used to sign SAML messages and we can't not change that, you know if there's any way to upload this certificate to the system in order we ca...

Resolved! BPA API Query Error

With the impending demise of On Demand Best Practice in Strata Cloud Manager coming fast on 31 March , has anyone seen this error before when trying to do a on demand bpa via the AIOPS for NGFW Best Practice Assessment API. The error is error_code 1210 description is "Failed to associate AIOPS instance with TSG" but Aiops doesn't exist anymore...

ADEM Shows Gaps In Synthetics Trends

New to Prisma/ADEM and GlobalProtect in a SASE environment. I'm using ADEM/Activity Insights to troubleshoot a user experiencing Citrix Disconnects. We noticed high Memory Utilization (> 85%) and believe that is it. However, I'm perplexed- ADEM shows two ~ 5-minute gaps in Synthetic Performance Metrics graphs in the user's Experience graphs b...

Unable to ping to Secondary ISP IP from Primary ISP IP

Hello Everyone, I'm using two internet connections: a primary ISP and a secondary ISP. Is there a way to ping the public IP address of the secondary ISP from within the local network? I would appreciate it if you could share the configuration steps. Thank you so much!

URONMAPU by • L1 Bithead
  • 569 Views
  • 4 replies
  • 0 Likes

3200 dual power packs

Is the purpose of the 2nd optional power pack for redundancy? If connected to a separate PDU, does the optional one automatically supply power upon failure of the primary? Is one actually primary? What is preventing over-power from both supplying? #paloalto3200

james by • L0 Member
  • 121 Views
  • 1 replies
  • 0 Likes

Palo 3020 dagger logs

I've done a private reset to the palo, ive done a factory reset to the palo. After logging in, the command I try putting in is show interface all. comes back as server error: Error Occured: See dagger.log for information. I then type the command to view the dagger logs, "less /var/log/mp-log/dagger.log" same when i try using "tail" and I get a I...

Resolved! License needed for SD-WAN dashboard on Strata cloud manager

Hi, I need to confirm what is the license needed for SD-WAN dashboard on Strata Cloud Manager. This part of the document informing that SD-WAN dashboard is supported by Strata "Cloud Manager Essentials + Strata Logging Service" or Strata Cloud Manager Pro https://docs.paloaltonetworks.com/strata-cloud-manager/activation-and-onboarding/str...

how to erase this "Warning Expired Certificate Check" PA-1410 version 12.1.6

Hi team, I would like to ask if there is any way to erase this Warning Expired Certificate Check. According to different articles, we can ignore due to the fact that it is not affecting traffic or something else. Moreover, I already checked the certificates and all of them are valid, and default trusted certificates showed me a lot of certifica...

F.Pinar by • L3 Networker
  • 342 Views
  • 1 replies
  • 0 Likes

Need to block WINSCP application but want to allow ssh

Hi Team In sec policy I have allowed for some users only RDP and SSH application. But these users are able to use WINSCP application because WINSCP application also using port 22. I want to block winscp application but allow ssh application. How can we achieve this ? Please help us. RegardsMohammed Asik

  • 24372 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks