This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Start a conversation

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4838 Views
  • 0 replies
  • 1 Likes

Help with file blocking security profiles

Hello everyone, Let me say I am new to the live community, I am trying to figure out if possible to Block file downloads using the "File download" security profile. I enabled it added it to my in to out policy and it still downloaded the files. After doing some more research I found out that the "Allow HTTP partial response" is enable it w...

Undecided application

In our environment, some webpages are not accessible. (This site can’t be reached) When I monitor the session browser, there is "undecided" in the Application column. I have attached the screenshot. Please help me to solve this issue.

gdu_palo by • L1 Bithead
  • 447 Views
  • 4 replies
  • 0 Likes

12.1 Base update not available

Hi all, I have a new PA-440, I've registered it and applied all the licensing. I've been updating the software on it but noticed there is no 12.1 base to go to so I'm not able to install 12.1.7-h3. Is there a reason for this, or something I'm missing? I'm currently on 11.2.10-h14. Base releases is checked on the bottom, and I've done a check now...

DopedWafer_0-1790785110606.png

Virtual patching iand PANOS Shield n PANOS 12.2

Hello , Joined the webinar and amazed by the Virtual patching concept, We are using PA-1410, except the ATP+ lic and PANOS upgrade to v12.2 other technical prerequisites, more technical information to share? cannot find in the official doc https://docs.paloaltonetworks.com/network-security/security-policy/administration/security-profiles/... Do ...

Addition of a DPC on a 5450 causing packet loss

Hello Everyone, Hope you all are doing well. I have a question regarding an issue we experienced after adding a new DPC to a firewall. After installing a new DPC in Slot 6 and changing the session distribution method to Session Load, the firewall started experiencing connectivity issues with the router and peer IP addresses. We observed a signif...

wally4 by • L2 Linker
  • 161 Views
  • 0 replies
  • 0 Likes

Resolved! Upgrade release

Hello everyone, For a customer, I need to upgrade the release from 10.2.7-h8 to 12.2.2. I would like to understand which steps are necessary to perform this upgrade. In short, do I need to install every required intermediate release until I reach the target version? For example, would the procedure be something like: Download the base image fo...

trojan/Win32.deceiver.d - False Positive?

I have noticed that PA NGFW sees this threat trojan/Win32.deceiver.d using Logon.exe from PCs in a specific zone (zone 1) going to our DCs that happen to be in a different zone (zone 2). I have had a couple of users say they have to type in their credentials a couple of times but we blamed DUO for that. In the Threat log I see only a few of th...

Resolved! [SOLVED] THE NGFW's DHCP SERVER AND DHCP RELAY SUDDENLY ARE NOT WORKING!!

Hello, LiveCommunity team! I created this post to share my experience with an issue on our branch PA-1420 NGFW, which is configured to act as both a DHCP server on the ethernet1/4 interface and a DHCP relay agent, but suddenly stopped working! About 20 days ago, our DHCP server and DHCP relay agent stopped functioning as expected. We use our PA ...

DanielSRomero_2-1789087056190.png

High availability failover: GARP doubts.

Hey guys!. First time poster here.To begin with, I am beginner to PA and learning my way through. I have just reached the HA part, and have a few questions.In an active/passive deployment, when the Active unit fails and the Passive unit starts taking over, it sends GARP and updates the downstream/ (upstream?) switches CAM tables with the new in...

Nadeem69 by • L0 Member
  • 1699 Views
  • 2 replies
  • 0 Likes

Resolved! Fast Path vs Slow Path with Content ID

Hi, newish to Palo Alto so trying to understand the demarcation between Fast-Path and Slow path when using Content ID. My understanding is that when a new traffic flow starts App-ID is used to determine the application and once the flow is established traffic moves to Fast path. Am I right though that if Content-ID is used that the traffic m...

M.Gannon by • L2 Linker
  • 831 Views
  • 3 replies
  • 0 Likes

Throughput from CLI vs Dashboard

hello experts, I have pa-3220, want to upgrade to new model, quite satisfied with our existing throughput, max session and new session... how to find out those figures from CLI or rhe Web-UI? what to spot out or how to cater the traffic spike? What is the CLI commands? any other need to concerns? thanks.

  • 1651 Posts
  • 62 Subscriptions
Top Solution Authors
View All
Latest Comments
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks