This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Start a conversation

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4555 Views
  • 0 replies
  • 1 Likes

Wildfire detecting phishing (severity high) but action is allow

Hello all, I am seeing multiple Wildfire submissions that have the same source IP and are being detected as smtp-base with the verdict of phishing, high severity but the action is "Allow". I have noticed in the Antivirus profile that for SMTP the "Wildfire signature action" and the Wildfire Inline ML action" is set to "default (alert)". How do ...

ccfritz by • L1 Bithead
  • 1940 Views
  • 1 replies
  • 0 Likes

PA-HDF issue

After factory reset as suggested i get the following Has any one come across this type of error and how can it be resolved I am trying to learn and get comfortable with the device but getting these errors Please help Dalton

Dalton by • L0 Member
  • 1865 Views
  • 1 replies
  • 0 Likes

Dual dynamic ISP with single VR

Hi , have 2 dynamic isp at site 1 with single vr and ECMP and 1 public ip at site 2 paloalto at OCI cloud , i have setup dual tunnels from site 1 to site 2 but its not stable at all and most of times if we simulate failover using either path monitoring or tunnel monitoring we can see that vpn is stuck in initiating phase. We used below guide h...

PA-HDF issue

I have purchased a PA 200 to get some practice for my exam i configured it but forget my pw so i done a factory reset and since getting PA-HDF login. i entered admin admin and getting incorrect pw I have attached the file please advise

Dalton by • L0 Member
  • 4873 Views
  • 2 replies
  • 0 Likes

Can not change

Hello Every one I was trying to build a Site to Site Vpn. I can only select limited interfaces when creating a new Zone. The selection option does not even include the main gateway interface (Ethernet1/10. I have attached a screen shoot of the scenario.

Habte01_0-1660835482512.png
Habte-01 by • L1 Bithead
  • 3234 Views
  • 6 replies
  • 0 Likes

Resolved! Issue with license

Hello Mr. We have renewd our subscription for the PAN-OS features all gone ok but issue with the PAD-DB URL filter. PAN-DB URL has not retrived the service subscription in the license page. 'when I tried to user online license retrival' but when I tried to upload the key it added a new windows 'Advanced URL fiter' with the new subscr...

Distribution of licenses across multiple vSys

Dear All, We have a PA-5200 series firewall. I have a small question which I couldn't find an answer in the public documentation, blog or discussions. My question is that how licenses are distributed among the vSys in the same firewall. The license(s) that I am interested are below: Threat Prevention Subscription Global Protect Subs...

mune3b by • L0 Member
  • 2239 Views
  • 1 replies
  • 0 Likes

What is the seq number in userID log ?

What is the seqno field in userID logs(below link) ? What is the range for that? Will it rollover when it reaches the maximum ? https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/user-id-log-fields User-ID

saswins by • L1 Bithead
  • 2641 Views
  • 2 replies
  • 0 Likes

Prevent Credential Phishing with UPN (userPrincipalName)

Hi World, I'm have my first contact with this Prevent Credential Phishing feature. With the option "IP User", because UserID Mapping is already in place, i'm able to detect sAMAccountName Username submissions. But a lot of phishing sites are focused on the UPN, but the UPN username filed submission is not detected by the firewall.sAMAccountName ...

fhu_omi by • L1 Bithead
  • 2964 Views
  • 2 replies
  • 0 Likes
  • 1589 Posts
  • 60 Subscriptions
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks