Web Proxy Discussions | Palo Alto Networks

Welcome to the Web Proxy Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

Request to unblock firewall for my website

Hello, I published my new website theaiembrace.com as I am launching my new business. It seems you have blocked outbound access to my website by firewall and DNS. Can you unblock access, please?Many thanks. Regards,Telma

HRM Server can't Access .From Local LAN .

I am hosting HRM Server where "career.ibnsinatrust.com" is hosted, I am getting access from outside, but not from my LAN. I have done ospf on mikrotik to paloaltoFirewall, and default route from mikrotik to 0.0.0.0/0. Now how do I route it so that I can get the service from my Local LAN?

SSL decryption exclusion or decryption policy

Hello, I have a host unsuccessfully attempting to connect to AWS. The firewall is resetting the connection, based on packet captures. Which would be the best way to exclude this traffic from decryption: the SSL decryption exclusion list or a decryption policy? I tried adding the source host to an existing no-decryption policy, but it still h...

When web proxy will support XFF header insertion and web cache ?

Hi all, Now with explicit and transparent forward proxy support I see a need for X-Forwarded-For/Real-Client-IP header insertion support and a second place cache support. Palo Alto can insert the user id in a header for the backend server (Username Header Insertion) but why not the ip address 🤔 Maybe before it was harder to extract layer ip add...

Define rules for allow/block user access to social media platform / Instant messager

Dear PA lover, We have the use case to allow / block user try to access social media platform.1. Is it possible to allow/block by specific user or User group like FB, YouTube?2. Can allow limit time management access or short time?3. Does PA Proxy have visibility to block user try to access IM ( TG both Apps/Web portal)?4. In case user have perm...

PA Web Proxy has more than syslog / logs on current PA FW

Dear PA team, PA Firewall and PA Web proxy are integration with SIEM. Before: When my PC run though connecting on PA firewall has only 1 log ( End Traffic , Deny Access, Permit...) for each session. Example: 1. Traffic End -> Feb 2, 2025, 10:15:00 AM Now:When my PC point connectivity to PA Proxy there have 2 or more for each session. ...

Logs Traffic on PA Proxy

Hello PA team, As per I reviewed, on PA proxy (UI) where the Traffic display with below information: There are few traffics: - Application: incomplete- Action: allow- Session End Reason: tcp-rst-from-server Can you share the commend / doc support why Application: incomplete?How to resolve it to Complete? Mode: Transparent Thanks,

Resolved! Upgrade / Downgrade PAN-OS

Dear PA Team, Can you share the PA best practice of Upgrade PAN-OS?In case the new upgrade not working stable or impact to operation how can we downgrade? Is there will the same existing config/policy after rollback? All upgrade/downgrade rely on PA proxy (UI)? How to monitor via CLI during we perform activity? Thanks,

SSL Decryption does not work after PAN-OS upgraded to 11.1.4-h7

Dear PA team, After we upgraded the PAN-OS from 11.1.4-h1 to 11.1.4-h7 than Proxy box not working with SSL Decryption policy unless we go to decryption policy and change from "Decryption" to "No-decryption" than user can access to internet back as normal. Can you share your commend / suggestion to resolve this case?Not sure it is hitting the bug...

File Blocking reponse page

Dear PA expert, File Blocking response pageWe have the requirement regarding the File Blocking response page.In case user try to access to any URLs and download some files and proxy is blocked due to the rule predefinded.Can we create the alert notification message on client PC? when user try to access any harmful or type of virus/malware files....

Welcome to the Web Proxy Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

PA Proxy configuration mode

Dear PA team, We have concern with implement PA SWG - configuration mode. 1. Can you share which mode is good to implement / POC? Explicit or Transparent?2. What are Pro and Con of using it?3. What is SSL Decryption work?4. Does PA Proxy can integration with other 3rd party to get syslog? Thanks,

Integration PA proxy with SIEM Qradar

Dear PA team, We study the requirement of integration PA proxy with Qradar. Can you share the good practice plus with URLS/doc support to configuration on both PA proxy and Qradar site? Thanks for update and supporting.

Integration PA Proxy with Qradar

Dear PA team, We study the requirement to integrate with SIEM Qradar. Could you share the URL/ docs support to configure on PA Proxy and Qraar site? Thanks,

Webex Application not working in Web Proxy

Dear PA lover,We have issue when turn on Webex Application on PC - "We can't reach the Webex service" . Reconnection... Can you share good practice to resolve this case?- When using Wifi is working fine, but when switch to connect LAN cable not work. Thanks for your commend / advise.

Unlock your full community experience!

Resolved! Upgrade / Downgrade PAN-OS