Next-Generation Firewall Discussions

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Offline upgrade

Hi all, Can we upgrade palo alto offline ? i.e downloading from portal and manually loading on device. If yes please share any reference document if anyone have.

Issues with User reports

We are unable to see more than 6 days of user data for USER ACTIVITY reports, URL filtering or traffic logs. OS version 10.1.6 Any help would be most appreciative.

What is the seq number in userID log ?

What is the seqno field in userID logs(below link) ? What is the range for that? Will it rollover when it reaches the maximum ? https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/user-id-log-fields User-ID

Palo Downgrade from 10 to 9.0.16-h2

Hi Team, I need to downgrade the Pan os from 10.1 to Palo Downgrade from 10 to 9.0.16-h2. Please let us know how to do. Its very urgent request. Any one please assist me.

Prevent Credential Phishing with UPN (userPrincipalName)

Hi World, I'm have my first contact with this Prevent Credential Phishing feature. With the option "IP User", because UserID Mapping is already in place, i'm able to detect sAMAccountName Username submissions. But a lot of phishing sites are focused on the UPN, but the UPN username filed submission is not detected by the firewall.sAMAccountName ...

Resolved! Can we retreive purged logs in palo alto firewall

Is it possible that we can retrieve the logs that are purged in palo alto firewall. We have PA 450 and we are not abe to see logs before 2 days and it is showing retention days as 1. But is it possible to retrieve the logs before 3 days

DNAT fails to work on PA-VM

Hi PA experts, I've been racking my brain to figure out the DNAT problem when doing the tests on PA-VM. It should be a very common scenario which is why I really don't get why the common DNAT doesn't work. On PA, the inside interface is 192.168.1.1/24 connected to a router 192.168.1.10/24. The outside interface is 1.1.1.1/24 connect...

User-id & group information miss mapping issue

Hello, I faced user-id and group information miss mapping issue in active/active configuration. However, I couldn't find the problem, so I need your advice. Device info: Device : PA-3220 PAN-OS : 9.1.11-H3 Active-Active, V-wire Currently, we receive user information through the aruba clearpass and xml-api linkage. There is no group setting on ...

Best Practice for URL policy question

So the scenario is we have an app on a server which needs to access several URLs. My colleague setup a custom URL Category and applied it to the policy, but the problem is this isn't working. From my reading on URL Categories, this applies to web-browsing traffic, not URLs themselves as destinations. Meaning if traffic is deemed to be something ...

Wildfire is resetting the connection

Hi, I want to know why wildfire is resetting the connection for legitimate traffic.

Problem with PBF with two ISP and two VR

Hi all, I have a PA220 managed with Panorama. Very cool mgmt and very powerful. Only the PA220 is a bit slow.My Situation - I have two internet connections (Eth 1/1 and 1/7) with fixed IP. Both have their own VR and therefore both have a null route. And both have own untrust1 and untrust2 zone.All my clients 10.10.10.x/24 are in trust1 zone and ...

LED Status yellow for PWR

Hello Guys, Need some suggestions, Paloalto 5220 or say 3220 while deploying I can see yellow LED in PWR but every other LED's are green. referred - https://docs.paloaltonetworks.com/hardware/pa-3200-hardware-reference/service-pa-3200-series-firewall/interpret-leds-pa-3200-series In this document it says it will either be green for ON and ...

Resolved! Traffic log action shows allow but session end shows threat

Hi I need to know if any traffic log is showing allow and if the session end reason is showing as threat than in that case the traffic is allowed, or it's blocked, and also I need to know why the traffic is showing us threat.

Resolved! Creating Data Filtering Profile in PA

Hi, I am creating a data filtering profile and I want to only allow alert threshold, not to block, so I need to know how much value to add inside.

Resolved! DNS-base application

Hi ALL, In our monitor log ,we see a lot of deny for a few PCs with "dns-base" application . Please see below: what is "DNS-base" and how do we allow it if needed. Thanks QL

Discussions

Welcome to the Next-Generation Firewall Discussions!

Offline upgrade

Issues with User reports

What is the seq number in userID log ?

Palo Downgrade from 10 to 9.0.16-h2

Prevent Credential Phishing with UPN (userPrincipalName)

Resolved! Can we retreive purged logs in palo alto firewall

DNAT fails to work on PA-VM

User-id & group information miss mapping issue

Best Practice for URL policy question

Wildfire is resetting the connection

Problem with PBF with two ISP and two VR

LED Status yellow for PWR

Resolved! Traffic log action shows allow but session end shows threat

Resolved! Creating Data Filtering Profile in PA

Resolved! DNS-base application

Policy Optimizer not available in PAN-OS 12.1

IPSec Dynamic Peer VPN, failure to send traffic over attached tunnel interface

Exporting Dynamic address Group but not show list address

Clear ARP for spesific ae interface

GlobalProtect 6.3.3-1016 Failed to Open File Mac M3 Pro (Apple Silicon) macOS Tahoe 26.5.1

Re: Policy Optimizer not available in PAN-OS 12.1

Re: IPSec Dynamic Peer VPN, failure to send traffic over attached tunnel interface

Re: Commit Protection – Automatic Restore Point Before Every Commit

Re: Anyone with exp in Firewall PAN-OS SD-WAN without panorama for VPN S2S Dual ISP ?

Re: Is there a way to configure Pan-OS to integrate with an ACME server for certificate enrollment?

Unlock your full community experience!

Resolved! Can we retreive purged logs in palo alto firewall

Resolved! Traffic log action shows allow but session end shows threat

Resolved! Creating Data Filtering Profile in PA

Resolved! DNS-base application