This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Start a conversation

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4869 Views
  • 0 replies
  • 1 Likes

2 LANs are not reachable to eachother

In Palo Alto Firewall, we are facing an issue. we have configured 2 LANs and 2 WANs. working fine even load balancing also works.But LANs cannot ping/reachable with eachother. even both lans having internet access.How can we configured that LAN can reachable with eachother and rest of configuration remain same.Thanks

Outbound SSL Decryption Quirk

Hello, I have established an outbound SSL decrypt policy that I have enabled for only myself as I test functionality. Over the past few months, I've noticed a quirk that I'm unsure of the reasoning behind. With the policy enabled, sometimes connections to certain destinations will require a reload of the webpage to establish connection. For ...

RH747 by • L2 Linker
  • 2672 Views
  • 2 replies
  • 0 Likes

Regarding the support for Cisco ISE integration with PAN-OS 12.x.

Hello, ExpertI have a question regarding the support for Cisco ISE integration with PAN-OS 12.x. In the PAN-OS 11.0 (EoL) documentation, it appears that integration with Cisco ISE (TrustSec) is supported through the Panorama Plugin:https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/panorama-features/static-security-group-tag-sgt-s...

boyuzhan by • L0 Member
  • 1107 Views
  • 1 replies
  • 0 Likes

LSVPN Portal connection Failed

Hi We have around 500 sites and most of them are connected via LSVPN and a Site-2-Site VPN for backup. At somepoint the username for the portal connection has been changed which means all off the sites that are connected via LSVPN report that they have failed to connect to the portal. My question is, if the NGF fails the Portal connection a...

R.Moth by • L1 Bithead
  • 840 Views
  • 1 replies
  • 0 Likes

VM firewalls can not join VM panorama all hosted in AWS cloud

Hello Team, We are having an issue connecting palo-alto VM firewalls in AWS to the panorama hosted in AWS as well. connectivity is successful between the firewall and panorama and we are using management port for this traffic. we ran below command show netstat all yes numeric-hosts yes numeric-ports yes | match IP and found the state established...

palocomunitypanorama.PNG
Jagdeep1 by • L2 Linker
  • 1706 Views
  • 4 replies
  • 0 Likes

Resolved! Public Website IPs that is not a part of the address object group specified in destination is being blocked by Deny security policy

Hi Team, I’m experiencing an unusual issue with my Palo Alto firewall. This problem started about a week ago. Prior to that, the website in question was functioning properly and being handled by the appropriate security policy. Currently, a public website is being blocked by a specific security policy in the firewall. Upon reviewing this polic...

Resolved! Security Policy

I recently created a new security policy to see how many hits are from a specific application. The rule is "IN-OUT-APP-BLOCK1". It is Sourcing from my INSIDE ZONE from ANY IP address. The Destination is the OUTSIDE ZONE to ANY IP address. It has 'irc' set as the application, no service, and ALLOWED action. Pretty simple rule. The rule has a ...

dworakj by • L1 Bithead
  • 2471 Views
  • 6 replies
  • 0 Likes

Firewall EDL URL Access Error Cortex XDR

Dear Everyone, I would like to seek for advise regarding to Firewall EDL access Source of Cortex XDR. I have following the guide https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-3.x-Documentation/Manage-external-dynamic-lists. However, I facing the issue after configure EDL, the URL Access Errror. ++Enable EDL on Cortex: ...

SopanhaRoth_0-1752827385810.png
SopanhaRoth_1-1752827427425.png
SopanhaRoth_2-1752827482780.png
SopanhaRoth_3-1752827541398.png

Palo Alto Networks PSE Hardware Firewall Professional (Strata)

Dears,I'm Paloalto partner and in order to go for next level I need to take this exam Palo Alto Networks PSE Hardware Firewall Professional (Strata), I'm looking for any study materials from those who took this certificate before.also I tried to use the codes in the certificate datasheet which isPSE-PAC-2024, PSE-OP-2024 but I coudn't find the e...

PaloAlto PSE Cer.jpg

Resolved! Newbie Initial Setup Question

Good morning,New to PA but have configured Fortinet, Meraki, Unifi firewalls so not a complete novice. I have a PA410 trying to setup on my home lab for testing prior to deployment. Connection path to Internet as follows: PA410 ----- L2 GBe Switch ----- Unifi Dream Machine (DHCP) ----- Fibre Internet After powering on, I set it to boot in stan...

paul by • L0 Member
  • 2290 Views
  • 2 replies
  • 0 Likes

KAKAO TALK APP issue

Hi All, Does anyone here encountered an issue on kakao talk app? A south Korean messaging app. We have south korean users on our malaysia site that uses this app. When the user tries to login using their own hotspot they can connect without any issues, but when user is connected on our wifi, the user tries to login and was getting an error 5...

weezy_0-1755758050671.png
weezy_1-1755758329477.png
weezy by • L3 Networker
  • 6979 Views
  • 3 replies
  • 0 Likes

Upgrade Palo Alto

Hello, I have Palo Alto with current version 10.2.7-h3 that is HA and would like to upgrade to version 11.1.4.h18.I am looking for an official Palo Alto link that describes the required upgrade paths (for example: from 10.2 to 11.0, then from 11.1 to 11.1.4, etc.).I would like to share this link with my manager. I found one link, but it does not...

  • 1657 Posts
  • 63 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks