Next-Generation Firewall Discussions

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Resolved! Management Interface and In Band Network Overlap

Hello, I have the management interface of some PAs in the 10.10.10.0/24 management network. This is the a corporate management network for network devices etc. I also want to inspect traffic on this network and have assigned a interface/security zone with the default gateway for the management network on the PAs. I am having trouble getting the ...

Massive alets from PAN NGFW Source

Hello community, I need your help, At my last 30 days im getting alot of alerts to my XSIEM from PAN NGFW source about Prevented action from bad URLthe category is (Spyware Detected via Anti-Spyware profile) After block Url's and Domain and added them to Black List, i still get the same Url and domain trigger agine. Someone have idea what to do?

configuration conversion

hello I have been tasked with replacing a PA 850 series cluster with 2 x 435 firewalls Q is there a best practice migration guide or migration tool that could be used to assist with this task ?

NFS 4.0 vs 4.1

Looking for guidance around configuring a firewall for NFS 4.1 traffic. NFS traffic using NFS 4.0 works fine but when switching over to NFS 4.1 there is a huge amount of latency. To my understanding NFS 4.1 uses parallel nfs which is structured differently than previous nfs. Instead of the NFS Filer head (Server) being the gateway between the st...

Making PA-820 quieter??

Hi, I have an opportunity to grab one of company's Palo Alto PA-820 firewalls for free. It would be shame to dispose of perfectly operational hardware just because topology has changed and we have no use for it anymore. But - had one at home when I was learning PAN-OS and found it to be quite loud, and because my home lab setup in in living ...

Migrating to multi-vsys environment

We recently decided to migrate to a multi-vsys environment for two of our data centers. The main reason for this is the shared gateway feature. We are starting to do a lot of disaster recovery planning, and need a segmented environment (with overlapping IPs), that can also share the internet connectivity. We were just using virtual routers to...

Standby firewall restarting on 11.0.4-h1

Upgraded my 5250 firewall pair last week to 11.0.4-h1 for CVE-2024-3400. Since then, have seen my secondary/standby firewall reboot twice over the course of a week after a error of "HA Group 52: Dataplane is down: too many children exited". This never happened prior to this release. I am currently working with support, just waiting on a resp...

Issue Nat Outbond Palo Alto

i got an issue, while sometimes my fortimail is unable connect to internet, and for my fortimail to able connect to internet again i disable and enable my nat policy, is there any bug related to that because i got this every day here is my nat policy

Resolved! Gmail imap traffic allowed but reset as threat

Hello everyone, PA3220, it is already a couple of days as gmail imap traffic is allowed, but connection is reset as threat in Traffic Logs (see attached) Threat logs show nothing. When checking traffic details, there is a strange app characteristics (see attached) Any ideas?

Resolved! Block PDF sites

Hello there, I need to every pdf converter sites. Examples like pdf.io, tools.pdf24.org, lightpdf.com. I need to block that site url that contains "pdf" How to configure it ? Any help please ?

License transfer

How can I transfer license to spare device if no old registered devices.

Need to allow dropbox sharable url and rest of everything block

Hello , we got one request from user that he required only access sepcific sharable url only and rest of dropbox traffic blocked . Please help with this, as user have some pdf which need to download with dropbox specific url (that dropbox url shared by vendor)

Restart procedure details

How can I install Hardware PA 5410 Firewall Palo Alto

PA-440 is showing to Panorama and won't allow removal

Currently have a PA 440 acting if it's still talking to a panorama server which it should not have ever have, I think it may have been due to an issue when I bought last year new. I'm not sure I've attached screenshots for suggestions complaining about merge size etc. I don't have Panorama. I am a very small office.

PA 3220 40Gig port

I want to use port 21-24 for 10G connectivity. Per the Data sheet these ports are 40G. Can I configure them to operate at 10G? Thank you, Ahmed

Discussions

Welcome to the Next-Generation Firewall Discussions!

Resolved! Management Interface and In Band Network Overlap

Massive alets from PAN NGFW Source

configuration conversion

NFS 4.0 vs 4.1

Making PA-820 quieter??

Migrating to multi-vsys environment

Standby firewall restarting on 11.0.4-h1

Issue Nat Outbond Palo Alto

Resolved! Gmail imap traffic allowed but reset as threat

Resolved! Block PDF sites

License transfer

Need to allow dropbox sharable url and rest of everything block

Restart procedure details

PA-440 is showing to Panorama and won't allow removal

PA 3220 40Gig port

Upgrade release

[SOLVED] THE NGFW's DHCP SERVER AND DHCP RELAY SUDDENLY ARE NOT WORKING!!

Fast Path vs Slow Path with Content ID

PA-460 VERSION 11.1.13-H7

web file blocking

Re: Upgrade release

Re: [SOLVED] THE NGFW's DHCP SERVER AND DHCP RELAY SUDDENLY ARE NOT WORKING!!

Re: Fast Path vs Slow Path with Content ID

Re: Throughput from CLI vs Dashboard

How to Update Specific Versions of Content via the CLI

Unlock your full community experience!

Resolved! Management Interface and In Band Network Overlap

Resolved! Gmail imap traffic allowed but reset as threat

Resolved! Block PDF sites