Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

DNS-Sinkhole Injection

The DNS sinkhole option works perfectly well with a Microsoft DNS environment. Unfortunately, it fails if you try to perform DNS-sinkhole injection in front of a BIND DNS server running on Red Hat Linux. Requests to malicious domains simply time out:

...

HeinzP by L0 Member
  • 102 Views
  • 1 replies
  • 0 Likes

Resolved! Newbie Initial Setup Question

Good morning,


New to PA but have configured Fortinet, Meraki, Unifi firewalls so not a complete novice.

 

I have a PA410 trying to setup on my home lab for testing prior to deployment.  Connection path to Internet as follows:

 

PA410  ----- L2 GBe Switch

...

paul by L0 Member
  • 88 Views
  • 2 replies
  • 0 Likes

KAKAO TALK APP issue

Hi All,

 

Does anyone here encountered an issue on kakao talk app? A south Korean messaging app.

 

We have south korean users on our malaysia site that uses this app. When the user tries to login using their own hotspot they can connect without any i

...

weezy_0-1755758050671.png
weezy_1-1755758329477.png
weezy by L3 Networker
  • 534 Views
  • 3 replies
  • 0 Likes

Upgrade Palo Alto

Hello,

 

I have Palo Alto with current version 10.2.7-h3 that is HA and would like to upgrade to version 11.1.4.h18.
I am looking for an official Palo Alto link that describes the required upgrade paths (for example: from 10.2 to 11.0, then from 11.1 to

...

High availability system alarms

I can't find all the HA events. I need to map all the system alerts on my FW.

Searching the system logs, I find logs like the ones shown below, but I need to be able to map each one to my server to monitor alarms.

 

2025/08/25 06:03:57 high ha config

...

Resolved! Security Policy

I recently created a new security policy to see how many hits are from a specific application.

The rule is "IN-OUT-APP-BLOCK1".  It is Sourcing from my INSIDE ZONE from ANY IP address.  The Destination is the OUTSIDE ZONE to ANY IP address.  It has '

...

dworakj by L1 Bithead
  • 307 Views
  • 5 replies
  • 0 Likes

FTP Evasion Detection (id:30401)

Could anyone help to explain what this threat is?

FTP evasion detection (id:30401)

I found this threat in the log, also checked the logs in FTP server, but don't get it.

here is the log from the source IP of this threat in FTP server (Microsoft IIS FT

...

YanQian by L1 Bithead
  • 113 Views
  • 0 replies
  • 0 Likes
  • 1632 Posts
  • 53 Subscriptions
Top Solution Authors
Top Liked Authors