Network Security
Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to all things Network Security.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Network Security
Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to all things Network Security.

Browse the Community

Next-Generation Firewall Discussions

Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

1641 Posts

VM-Series in the Public Cloud

The VM-Series is the virtualized form factor of the next-generation firewall. Use this discussion as a resource to discuss VM-Series deployments across public clouds like AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud, and Alibaba.

532 Posts

VM-Series in the Private Cloud

Use the VM-Series form factor to safeguard Private Cloud deployments. Use this forum to discuss deployments from VMware ESXi, VMware NSX-V, VMware NSX-T, KVM, Nutanix, Hyper-V, Openstack, and Cisco ACI.

88 Posts

CN-Series Discussions

CN-Series is the Palo Alto Networks' container native version of the ML-powered Next-Generation Firewall designed specifically for Kubernetes environments.

15 Posts

AIOps for NGFW Discussions

This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.

116 Posts

Panorama Discussions

Post discussions about Panorama, a centralized network security management solution for all your Palo Alto Networks firewalls irrespective of their form factors or locations, in this forum.

732 Posts

GlobalProtect Discussions

GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.

1712 Posts

Strata Logging Service Discussions

Strata Logging Service (formerly known as Cortex Data Lake) enables AI-based innovations for cybersecurity with the industry’s only approach to normalizing and stitching together your enterprise’s data. Join the discussion now.

37 Posts

AI Runtime Discussions

Welcome to the AI Runtime Security discussion area! Here, you can engage in conversations about AI Runtime Security, explore new insights, and stay updated on ongoing discussions.

5 Posts

Strata Copilot Discussions

Welcome to the Strata Copilot discussion area! Here, you can engage in conversations about Strata Copilot, explore new insights, and stay updated on ongoing discussions.

8 Posts

Web Proxy Discussions

Welcome to the Web Proxy discussion area! Here, you can engage in conversations about Web Proxy, explore new insights, and stay updated on ongoing discussions.

17 Posts

Advanced SD-WAN for NGFW Discussions

Welcome to the Advanced SD-WAN for NGFW discussion area! Join us to discuss field topics, address customer and field concerns, share suggestions, community recommendations, new feature requests, or exchange best practices and design ideas.

21 Posts

Strata Cloud Manager

Strata Cloud Manager is our AI-powered solution that enhances network security management, prevents disruptions, and simplifies operations across SASE and NGFW platforms. The names for AIOps, NGFW, Prisma Access, and SD-WAN have been updated to Strata Cloud Manager in the product UI.

66 Posts

Quantum Security Discussions

Palo Alto Networks customers can now start to protect their encryption from the threat of Quantum computers, by migrating to Post Quantum Cryptography (PQCs). Ask your questions or provide insightful answers in the forum specific to Post Quantum Cryptography.

2 Posts

Cloud Identity Engine Discussions

Cloud Identity Engine is the industry's first cloud-native identity synchronization and authentication service providing a single, secure user identity across Palo Alto Network's on-prem and cloud product lines.

29 Posts

Activity in Network Security

GPVPN Issue

We have GlobalProtect Agent 6.2.8-c317 yesterday some users could connect but could not access network files or get on the internet. Other user no problem. Nothing changed on our network other then the GP VPN license expired 2 days ago even though we paid for the renewal 3 weeks ago. I am not a Palo Alto person and since I cannot get to support...

New Deployment SCM Essentials > Pro for AIOps Functionality

Folks, I have a standalone hardware firewall and I'm am trying to to use what was the AIOps Essentials functionality now bundled with Strata Cloud Manager Essentials. The telemetry data is flowing from my firewall to SCM. Since installation I have performed a Commit on my firewall. In SCM Insights > NGFW > Status and Monitoring I see...

Triggering of Packet based protection under Zone protection profile

In the PA documentation, it says Zone protection is applicable to new connections that does not have any existing session. To mitigate flood protection that will works definitely. However under Zone protection profile we have packet based attack protection which deals packet based attacks which uses certain option in layer3 and 4 of a packet. ...

12.1 Base update not available

Hi all, I have a new PA-440, I've registered it and applied all the licensing. I've been updating the software on it but noticed there is no 12.1 base to go to so I'm not able to install 12.1.7-h3. Is there a reason for this, or something I'm missing? I'm currently on 11.2.10-h14. Base releases is checked on the bottom, and I've done a check now...

DopedWafer_0-1790785110606.png

Help with file blocking security profiles

Hello everyone, Let me say I am new to the live community, I am trying to figure out if possible to Block file downloads using the "File download" security profile. I enabled it added it to my in to out policy and it still downloaded the files. After doing some more research I found out that the "Allow HTTP partial response" is enable it w...

VPN Issues with SAP

I got intermitent connection affecting production PA-5220 VERSION 11.1.13 . Global protect 6.2.8-1045 troubleshooting : The VPN tunnel temporarily disconnected and routing entries associated with the tunnel were removed. The GlobalProtect client subsequently recreated and reconfigured the virtual adapter. A new IP address assignment was re...

F.Pinar by • L3 Networker
  • 166 Views
  • 1 replies
  • 0 Likes

I am facing an issue during the upgrade Panorama (PANOS 11.1.4-h7) to PANOS 12.1.7

I am facing an issue during the upgrade Panorama-VM (PANOS 11.1.4-h7) to PANOS 12.1.7, After uploaded PANOS version 11.2.10 base version able to upgrade successfully to PANOS 11.2.10-h13. After that when try to upgrade to PANOS 12.1.7 and uploaded images it gives an error "Failed to load image into software manager" If anyone faced this issue...

Gourab_H by • L1 Bithead
  • 166 Views
  • 2 replies
  • 0 Likes

Pre-Logon Behavior with SAML Login

I recently found interesting behavior in GlobalProtect with pre-logon when using SAML. I started off by following these instructions: Remote Access VPN with Pre-Logon The customer I was working with had certificates in the user-store they did not want to access during pre-logon or user login. We specified "Machine" in the "Client Certificate ...

Virtual patching iand PANOS Shield n PANOS 12.2

Hello , Joined the webinar and amazed by the Virtual patching concept, We are using PA-1410, except the ATP+ lic and PANOS upgrade to v12.2 other technical prerequisites, more technical information to share? cannot find in the official doc https://docs.paloaltonetworks.com/network-security/security-policy/administration/security-profiles/... Do ...

Addition of a DPC on a 5450 causing packet loss

Hello Everyone, Hope you all are doing well. I have a question regarding an issue we experienced after adding a new DPC to a firewall. After installing a new DPC in Slot 6 and changing the session distribution method to Session Load, the firewall started experiencing connectivity issues with the router and peer IP addresses. We observed a signif...

wally4 by • L2 Linker
  • 95 Views
  • 0 replies
  • 0 Likes

Undecided application

In our environment, some webpages are not accessible. (This site can’t be reached) When I monitor the session browser, there is "undecided" in the Application column. I have attached the screenshot. Please help me to solve this issue.

gdu_palo by • L1 Bithead
  • 303 Views
  • 4 replies
  • 0 Likes