Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 4551 Views
  • 0 replies
  • 1 Likes

Resolved! The traffics tab does not appear on the monitor.

Cordial greetings Engineers A PA-410 device with version 10.1.3 has arrived and we identified that in the monitor tab you do not see all the possibilities to see the FW logs (I attach image). Similarly, the device was updated to version 10.2.3-h4 but the behavior remains the same. Does anyone know the reason for this behavior?

Device Telemetry can't be removed/disabled from Panorama and/or local

We currently have difficulties to remove the Device Telemetry options in any way. it seems as this Options doesn't work as expected. This issue persisted across several Versions of PanOS / Panorama Panorama 10.2.2-h2 - When trying to remove the device telemetry options from the template stack the settings are still checked and a commit & ...

mattlede_0-1662714252725.png
mattlede_1-1662714278257.png
mattlede by L1 Bithead
  • 15103 Views
  • 15 replies
  • 1 Likes

URL Filtering is not working for Global Protect users

Hi all, We have a requirement of GP user should access certain URLs. But once i assign the URL category in security policy, GP user is not getting internet access.. SCENARIO 1 : Security Policy: Source > GP & Source user Group Destination > WAN Action > Allow Internet is working with full access. SCENARIO 2: Security Policy...

Having issues with Vmware horizon client RDP application through palo alto

The initial login works fine but when we try to open any RDP session, it gives an error as “Unable to Connect". But when on the personal network it works fine. Do not see any drops on the firewall, the initial connection is on TCP 443 after which a connection to tcp/4172 PCOI is created and is terminated by a TCP-FIN. Tried to provide an access...

Resolved! PA3020 EoL vs PanOS 9.1 EoL

Hi there, Checking this page, https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary I see that the EoL for PanOS 9.1 is December 2023. This page, https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates shows the Eol for the PA3020 to be October 2024. Howe...

Ander by L0 Member
  • 3290 Views
  • 1 replies
  • 0 Likes

Firewall crash after executing this command : debug dataplane show dns-cache print

Hello, After exceuting this command : debug dataplane show dns-cache print My firewall crashed and failover happened. I saw in the in the failover this error : "non-fonctionnal (Dataplane down : path monitor failed) After firewall restart and some manipulation the firewall is up again. Do you know why this command made crash the firewall...

Mamoudou by L2 Linker
  • 2014 Views
  • 1 replies
  • 0 Likes

FW stops forwarding files to WF 500

Hi, We have a PA-5250 that suppose to send files to a WF-500 appliance. Both are at 10.2.3 version. The FW suddenly stopped sending file to our private wildfire cloud. When we checked the "wildfire-upload.log" we see the following: "cancelled - first" "cancelled - concurrent file limit" "cancelled - by DP" Does anyone knows what can be the reas...

AmitKa79_2-1678982036842.png
AmitKa79 by L2 Linker
  • 1704 Views
  • 1 replies
  • 0 Likes

Log Subtype

Hi All, I need some information on checking the logs. I see few things like END, DENY, SPYWARE, INFORMATION etc and in the action we see it as allowed. But the access will not be working. May i know what this Log Subtype means and what information will it give us in troubleshooting? When it says ALLOW as action then why in Subtype it is Deny. Ho...

Webex issue with Mobile Users

Hi All, We are facing weird issues with Mobile users accessing the Webex Phone Services. Wifi users connecting to laptop doesn't face any issues. But when the phone is connected to Wifi users are unable to access Webex Phone Services. Not really sure if anything additinal needs to be done for mobile users accessing webex. Users on Android gettin...

Palo Alto Networks next-generation firewalls Threat prevention signatures

Hello. Please currently i'm studying the Palo Alto Networks next-generation firewalls Threat prevention module, and 'm interested in the list of the available signatures (description, severity ranking, Threat type, ). I found that threat vault can give this informations : https://threatvault.paloaltonetworks.com/ but for that we need to provid...

lonis23i by L1 Bithead
  • 4709 Views
  • 7 replies
  • 0 Likes

Unable to create a support account

I want to register one new PA-220 firewall. I need to create one Palo Alto support account, however, I failed to create it. 1. I input my email address 2. All contact information 3. Serial Number of the PA-220 firewall 4. Order Number. I purchased it on eBay, I input the Order Number on the Invoice from the seller. After I submitted the applic...

Firewall servicing as UserID Client - limit

Good Morning, Searching for a PA doc I found a while back and my google-fu is failing me. Looking for the documented limit of clients who can connect to a PanOS device acting as a redistribution agent. I'm positive I saw 1000 at one point a few years ago, but unable to find it again. Command query to see current CLIENTs firewall 1000 is ac...

  • 1588 Posts
  • 60 Subscriptions