This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Start a conversation

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4859 Views
  • 0 replies
  • 1 Likes

Resolved! Translate Pop-up Feature Block

We recently started experiencing an issue with the google translate pop-up feature in browsers. When users try to use the google translate pop-up feature on any webpage the request is being denied by the firewall however accessing the google translate website directly works without any issue. On a sidenote we're currently using SSL decryption on...

How to make Router BGP ping into IP inside Palo Alto

Good Afternoon guys, how i could reach network 10.100.111.0/24 inside Palo Alto from Router BGP? i have success to get routing table of 10.100.111.0/24 from Router BGP, but unfortunately i can't ping into gateway of 10.100.111.252/24. How to solve this? Thank youThis is route inside Router BGP : And this is Configuration Inside STL-CORE-01 : STL...

Mikhailzd_0-1774930708413.png
Mikhailzd_1-1774930782934.png
Mikhailzd_2-1774930921598.png
Mikhailzd_3-1774930940370.png

Continuous Threat Logs Showing Management Server IP as Source

Hi Friends, I am facing an issue with my PA-440 firewall after the recent update to 11.1.13 i have been encountring an continous threat logs generation for the threat id : 765344918 with the threat type as : spyware and the threat id name as : generic:vikingindustries.in and the destinations as : 8.8.8.8 / 4.2.2.2 respectively The service ro...

Satyak by • L3 Networker
  • 2008 Views
  • 3 replies
  • 0 Likes

Stealth Rule Question

Hi everyone,Could someone please explain the correct way to create a Stealth rule in Palo Alto? My understanding is that it involves creating a rule that denies all traffic destined for the firewall’s public IP addresses.I’m also unsure whether this will impact IPsec tunnels or GlobalProtect connections that terminate on those same IPs. Addition...

ititsw by • L0 Member
  • 2194 Views
  • 4 replies
  • 0 Likes

Resolved! Internal IP's hitting sinkhole policy

Hello all, We have a sinkhole configured on our PA440, and we're seeing some IP's hitting it and getting sinkholed, there's 1 endpoint that's an old NT4 legacy machine that runs on our production environment. And other ones that are windows and probably wifi endpoints like phones. I have no way of scanning the old NT4 box, and that only ran our ...

cdcirexx by • L3 Networker
  • 5316 Views
  • 8 replies
  • 0 Likes

Resolved! Intergrations of External Dynamic Lists (EDL) with External Systems

Hi! I’m looking for guidance on whether entries from External Dynamic Lists (EDL) in Palo Alto Networks can be programmatically accessed or integrated with external systems for broader threat intelligence use. Specifically, I would like to understand: Whether EDL contents (IP, domain, URL indicators) can be retrieved via API or another support...

Request for Assistance: PA-850 Recovery Boot and Support Account Registration

I am writing to request urgent assistance with a Palo Alto PA-850 device in our possession. The device details are as follows:Model: PA-850Serial: ******P/N: ***Issue summary:The device’s SSD has failed and I have replaced it with a new blank 240GB SSD.I am unable to boot into maintenance mode and cannot proceed with recovery.When attempting to ...

admin by • L0 Member
  • 1408 Views
  • 2 replies
  • 0 Likes

site to site VPN between Palo Alto Firewall and Cisco ASA Power fire firewall communication issue

I have configured a site-to-site VPN between my Cisco ASA Firepower 2140 firewall and a partner using a Palo Alto firewall. The VPN tunnel is up, and the partner’s server defined in Phase 2 is able to reach my server successfully.However, my server is unable to reach the partner’s server.Could you please assist in identifying the issue and provi...

How to Patch Vulnerability - Plugin 43160 (CGI Generic SQL Injection) on GlobalProtect

Body: We have detected a blind SQL injection vulnerability (Plugin ID: 43160) on GlobalProtect login CGI (/global-protect/login.esp) using Nessus. Details: - CVSS Score: 7.5 (High) - Affected Parameter: 'action' - Example: /global-protect/login.esp?action=';WAITFOR DELAY '00:00:3';-- Environment: PAN-OS version: [Your Version] GlobalProtect ...

Resolved! Inquiry Regarding CEF Configuration Guide and Custom Log Format Variables for PAN‑OS 11

Attention: Global TPM team Question ①: Regarding the CEF Formatting Guide for PAN-OS 11The following link contains CEF formatting guides for various versions of PAN-OS, but I cannot find a guide for PAN-OS 11. https://docs.paloaltonetworks.com/resources/cef Is it correct to understand that the CEF configuration guide for PAN-OS 11 is not current...

  • 1656 Posts
  • 63 Subscriptions
Top Solution Authors
View All
Latest Comments
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks