General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

How PA can replace a Proxy

Hi,

 

i search a easy way to see who is surfing on witch web site. where is it and how can i automatically write it to our file server oder any where else to?

So my dream is to put our proxy out of order.

the PA is connected to LDAP i can see a user but

...

Resolved! How to bound an ACL to GP VPN client

Hello
i have a need to provide a contractor with VPN access to certain resource on internal network (let’s call them 10.20.1.0/24)

I have a working VPN GP/Portal and contractor can connect to VPN with no issue. But contractor is allowed to access all i

...

Routing via a new internet connection

We currently route all internet traffic out through an internet connection connected to Ethernet1/4 on out firewall. I have another Internet connection that I'm going to connect to Ethernet1/6, and I want fraffic from one of my VLANs on site to route

...

GC66 by L1 Bithead
  • 1744 Views
  • 1 replies
  • 0 Likes

Resolved! 7.01 and certs

I am looking for the article that says that you cannot upgrade directly to anything past 7.01 without breaking certs.

jdprovine by L4 Transporter
  • 1615 Views
  • 1 replies
  • 0 Likes

What's new in MineMeld 0.9.16

Release Date: 2016-06-07

How to update: Updating MineMeld

 

Prototypes:

2 new prototypes from the MineMeld community (thanks !):

- Emerging Threats Open rulesets prototype, contributed by Víctor Barahona

- blocklist from badips.com, contributed by ne

...

Screen Shot 2016-06-28 at 15.31.18.png
Screen Shot 2016-06-28 at 15.31.29.png
lmori by L7 Applicator
  • 3036 Views
  • 0 replies
  • 2 Likes

Resolved! Application: Incomplete

Hi,

 

Does anyone have a suggestion on how to create a rule to catch Application incomplete? Now that traffic hits the first policy that allows traffic on that service (port). And it clogs the logs when looking at that rule and what has passes through

...

mgusta by L2 Linker
  • 9091 Views
  • 7 replies
  • 0 Likes

Global Protect Portal Feature Request

Am I posting this in the right place?

 

 

I would like the ability to display available VPN gateways for my users based on AD group membership.

 

E.G. I have 4 available gateways:

 

gw1 - no AD group requirements

gw2 - no AD group requirements

gw3 - no AD gro

...

Disble GlobalProtect Agent on internal - corporte lan

Hi,

 

is it possible to disable the globalprotect agent autoconnect on the corporate lan ?

 

scenario:

-outside the corporate lan the vpn connection must be autoconnecting to the globalprotect portal to enforce webfiltering etc..

- inside the corporate lan

...

edv by L0 Member
  • 1452 Views
  • 2 replies
  • 0 Likes

"Facebook-apps" And "Facebook Chat" block

 

Hi all,

 

Appreciate if you can guide me to block facebook-apps and facebook-chat in Palo Alto but allow other facebook features. I already implemented it in Application layer but failed, is there something i am missed? I am using PA-3020 and 7.0.3 ve

...

Service route destination option

What is the purpose of adding destination in service route?

We have a default gateway in management interface config and we also have specific route in vr so why we need it?

hrsingh by L0 Member
  • 2538 Views
  • 5 replies
  • 0 Likes

NAT after Proxy

Hi

 

I have to set up a PA-200 as a NAT.  That it self would not be the problem but between the PA-200 and the modem is a Proxy. I have no information about that proxy. The only information i have about the network is the IP settings given by DHCP. Is

...

Tiesto by L0 Member
  • 1712 Views
  • 1 replies
  • 0 Likes

XAuth RSA stopped working.

Hey,

 

So recently my XAuth RSA connection to my Global Protect via my Android phone stopped working.

 

I've already read the fourm post about Version 7.1.1 but I have not updated to that version yet and am still on 7.0.6.

 

I haven't made any changes (at

...

Zewwy by L3 Networker
  • 1284 Views
  • 0 replies
  • 0 Likes

Resolved! How to block www.youtube.com completely

 

Dear All,

 

Appreciate if you can advise how to block www.youtube.com completely. I have try using URL-Filtering and application layer level but still failed. I am using PA-3020 OS version 7.0.3

 

 

Imran

  • 24213 Posts
  • 99 Subscriptions
Top Liked Authors
Labels