General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Ensuring a Safe and Secure Community: How You Can Help

 

Dear LIVEcommunity Members,

 

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

safe-community_oct24.jpg
report-content.jpg
jforsythe by Community Team Member
  • 564 Views
  • 0 replies
  • 2 Likes

Sorting IP Address Objects

Hi All,

       Having a few UI issues at the moment. One being the fact that I have a subnet that I need to find some available/unused IPs to allocate. I go via Objects->Addresses and search via the subnet 10.10.10.x. This then shows me a list of used

...

dpenhall by L2 Linker
  • 4119 Views
  • 6 replies
  • 0 Likes

Vulnerability / AV / etc. Setup - Best initial approach

I'm new to the 5060 and I'd like to phase in some IPS functionality over the next week.  This is a production system sitting in front of fairly busy site, so I'm a little nervous....  especially being totally new to the PAN OS.

What's the best approac

...

cmaier by L1 Bithead
  • 1863 Views
  • 2 replies
  • 0 Likes

BrightCloud missing the Plot!

Hi Guys and Gals

I see there is already multiple threads about mis-classification on URL categories! I am now pleading with Palo Alto to address this issue with BrightCloud!

To reduce the none business related websites we started blocking the "society"

...

u7285 by Not applicable
  • 7697 Views
  • 17 replies
  • 0 Likes

SSL-VPN client can't connect

Have a security consultant that is trying to connect to our PAN SSL-VPN and thinks there is a bug and wanted me to report it.  He was using NetConnect SSL VPN client 1.3.1 with win7 and IE9. They could not get connected and got the following error;

j

...

dwgg by L1 Bithead
  • 2242 Views
  • 2 replies
  • 0 Likes

Panorama Logging Traffic Flow

Hi All,

Does anyone have any indicative figures of the amount of data that flows from a PAN apppliance to Panorama?

Say a 4050 running at a consistant 50%, and logging everything = xMB/day of logs?

I'm trying to calculate what will be required to have P

...

KatanaNZ by L3 Networker
  • 3383 Views
  • 3 replies
  • 0 Likes

Resolved! source and destination ports

Under security rules does service refer to source port or destination port and what is the best way to define both source port and destination port in a rule on version 3.1.6

ailfionn by L0 Member
  • 3351 Views
  • 3 replies
  • 0 Likes

Upgrade to 4.0.4 image version failed

Hi to all,


We've two PaloAlto firewalls PA-2020 with 3.1.6 software image version and HA licensed.Both have active gold maintenance support. Last week we tried to update to the last version 4.0.4 and the upgrade process failed.

Step 1

We started with th

...

How to setup multiple SSL-VPN tunnels

I'm hoping I'm missing something obvious here...is there a good way to support SSL-VPN access for different types of users who require different access and use different authentication schemes?

I am trying to setup multiple SSL-VPN tunnel configuratio

...

Resolved! Maximum life-time of SSLVPN

Hi all.

I have 3 questions about SSLVPN session time-out.

1. MAXIMUM LIFE-TIME of SSLVPN session?

2. What are the default values of Login life-time and Inactivity logout if it isn't set.

3. The meaning of "Logout/Expiration" and "TTL" come out by "show s

...

itnsystem by Not applicable
  • 3165 Views
  • 3 replies
  • 0 Likes

bypassed PAN box using free proxies

We are tested PAN 500 NFR in our lab . Did a search for youtube proxy on google and picked the first listed . Used them and bypassed the PAN box and was able to get to facebook and yahoo mail . I couldn't get to these sites through my browser directl

...

usvi by L3 Networker
  • 2966 Views
  • 4 replies
  • 0 Likes

PA500 split tunnelling DNS question

Hi

Have a PA 500 set up for split tunnelling - so clients access internet locally and all other traffic is passed over VPN tunnel to our office

I have DHCP set up on PA box so clients get primary DNS server (local ISP one) and secondary DNS (office one

...

sue_town by Not applicable
  • 3153 Views
  • 7 replies
  • 0 Likes

Gaming devices behind PAN firewall

We are using Capitive Portal for students on our campus. All students' devices including gaming devices get DHCP from a PA2050 and these IP ranges require CP. XBox seems to get DHCP and tries to connect to XBox Live servers, but fails. We don't see t

...

kumara by L0 Member
  • 1892 Views
  • 1 replies
  • 0 Likes
  • 23750 Posts
  • 110 Subscriptions
Top Solution Authors
Top Liked Authors
Labels