Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 90 Views
  • 0 replies
  • 0 Likes

search traffic logs by vsys in CLI

Does anyone know how to specify your traffic logs by vsys and add multiple search parameters of the same type like you can in the gui? We are running PanOS 4.1.7. Notice that the app option does not show up anymore and and there is no vsys option.

PA-

...

Jinx by L1 Bithead
  • 2396 Views
  • 1 replies
  • 0 Likes

How do you allow Polycom (nat) via Palo Alto FW?

Hi,

I'm having issue with configuring NATing for my Polycom unit sitting behind the firewall to work.  I have allowed all the required apps for Polycom to allow outgoing and incoming.  My issue is when I can only call out to another party with public

...

akatev by L0 Member
  • 8800 Views
  • 15 replies
  • 0 Likes

Resolved! about certificate expired date

Hi All,

Is there any way to custom certificate expired date that generate by paloalto itself ?  I saw it on webpage that is too short, it only have six monthes.

Thanks.

Regards,

Joy

Resolved! SSL decryption - Forward UNtrust certificate presented

Hello,

We experienced a problem with a specific SSL encrypted site: https://panakeia.infoman.de/

The original certificate is issued to "*.infoman.de" and was issued by Go Daddy (--> InfomanCert_Original.png). It seems to be perfectly valid but still ou

...

oschuler by L4 Transporter
  • 8889 Views
  • 7 replies
  • 1 Likes

JS/Trojan.iframe virus?

Hello,

I'm seen hits for the JS/Trojan.iframe virus only since last Wednesday or Thursday.  Have seen them associated with three different websites.  I suspect false positives.  Anyone else out there just started seeing these?  Was the virus definitio

...

schaleg2 by L0 Member
  • 4311 Views
  • 7 replies
  • 0 Likes

SSL VPN and iPhone OS 4.0

I was looking at the new specs for the 4.0 code of the iPhone OS, and saw that they were opening up the SSL VPN function to Juniper and Cisco.

Any chance Palo Alto is working on a NetConnect app for the iPhone?

http://www.apple.com/iphone/business/prev

...

mharding by L4 Transporter
  • 28506 Views
  • 58 replies
  • 0 Likes

QoS for Microsoft Lync

We are starting the initial rollout of Microsoft Lync clients.  Has anyone setup QoS for Lync on the Palo Altos?  Any issues to look out for that anyone has run into?  We have 6 sites that will eventually have Lync clients and I want to make sure the

...

dan_mc by L0 Member
  • 2422 Views
  • 1 replies
  • 0 Likes

Resolved! PBF for Torrent Traffic

I am trying to establish a policy to send all traffic based on bittorrent through a specific ISP.

However, when I add any application under the destination application, I get the error: application 'bittorrent' is not an allowed keywordapplication 'bi

...

rsaber by L1 Bithead
  • 1967 Views
  • 1 replies
  • 0 Likes

Resolved! How real-time is User-ID?

Kind of as per the subject really.  I'm interested in using User ID so that only authenticated users have internet access, but I'm not sure quite how "real-time" it is?

  • Someone comes in and switches on a computer, logs onto the domain, tries to browse
...

Resolved! meaning of source-user pre-logon

Hi,

Can anyone explain what the option "pre-logon" means as a value for source-user in a security policy?

I can't find anything about it. Not in the build in help, the admin guide nor the CLI reference.

nwsol by L2 Linker
  • 5729 Views
  • 5 replies
  • 0 Likes

Peer identifier for azure is required to be set

I have got a tunnel set up successfully to Azure but have had to specify the peer identifier by IP address which will not be very stable.  Azure support advise that the peer identifier set by azure is dynamic and that some firewall vendors (Cisco, Ju

...

Slow download for Metasploit Updates

I have question and I am not sure if I am posting this in the right place. I am also new to Palo Alto firewalls. I have a lot of experience with Cisco and SonicWall so you'll have to excuse me if I sound a little ignorant concerning Palo Alto at the

...

  • 23584 Posts
  • 107 Subscriptions
Top Liked Authors
Labels