Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

DNS-Sinkhole Injection

The DNS sinkhole option works perfectly well with a Microsoft DNS environment. Unfortunately, it fails if you try to perform DNS-sinkhole injection in front of a BIND DNS server running on Red Hat Linux. Requests to malicious domains simply time out:

...

HeinzP by L0 Member
  • 162 Views
  • 1 replies
  • 0 Likes

Resolved! Newbie Initial Setup Question

Good morning,


New to PA but have configured Fortinet, Meraki, Unifi firewalls so not a complete novice.

 

I have a PA410 trying to setup on my home lab for testing prior to deployment.  Connection path to Internet as follows:

 

PA410  ----- L2 GBe Switch

...

paul by L0 Member
  • 213 Views
  • 2 replies
  • 0 Likes

KAKAO TALK APP issue

Hi All,

 

Does anyone here encountered an issue on kakao talk app? A south Korean messaging app.

 

We have south korean users on our malaysia site that uses this app. When the user tries to login using their own hotspot they can connect without any i

...

weezy_0-1755758050671.png
weezy_1-1755758329477.png
weezy by L3 Networker
  • 594 Views
  • 3 replies
  • 0 Likes

Upgrade Palo Alto

Hello,

 

I have Palo Alto with current version 10.2.7-h3 that is HA and would like to upgrade to version 11.1.4.h18.
I am looking for an official Palo Alto link that describes the required upgrade paths (for example: from 10.2 to 11.0, then from 11.1 to

...

High availability system alarms

I can't find all the HA events. I need to map all the system alerts on my FW.

Searching the system logs, I find logs like the ones shown below, but I need to be able to map each one to my server to monitor alarms.

 

2025/08/25 06:03:57 high ha config

...

FTP Evasion Detection (id:30401)

Could anyone help to explain what this threat is?

FTP evasion detection (id:30401)

I found this threat in the log, also checked the logs in FTP server, but don't get it.

here is the log from the source IP of this threat in FTP server (Microsoft IIS FT

...

YanQian by L1 Bithead
  • 134 Views
  • 0 replies
  • 0 Likes

SSH Proxy Decryption issue

On the PA-440 firewall, I created a decryption policy for SSH Proxy (LAN to WAN zone). When I initiate an SSH session to the same firewall’s management IP (192.168.29.25), decryption does not occur, as seen in the traffic logs. However, when connecti

...

NGFW Saas Azure Logging

I have deployed the NGFW in Azure in a vnet. We had to redeploy due to a spelling error now we cannot set up the logging . We enable logs and save to a log analytics workspace. Acts like it is going to save but does not . Error provided . Error readi

...

  • 1638 Posts
  • 53 Subscriptions
Top Solution Authors
Top Liked Authors