This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Problems with IPSec tunnel

Hello,
I have a PA VM100 which hangs behind a dynamic public IP and it creates an IPSec tunnel to a PA220 with static public IP.  So the tunnel can only be established by the VM100. On the PA220 I have activated "Enable Passive Mode" at IKE Gateway ->

...

Resolved! L3 Subinterface Traffic's Not Passing

Hi Team,

 

Seeking for you advise, or your input that one my recent setup. 

 

I have made the Palo L3 subinterface for three VLAN's and the firewall port have been connected with Cisco L2 switch and the port of cisco has configured with trunk. 

 

After mad

...

Ignite 2020 Event Information

 

 

LIVEcommunity Ignite 2020 Event Information

 

Ignite 2020, our all-virtual event is right around the corner so we put together information about what you can expect and how to register! 

 

Read the blog here.

 

Now that we've shared a little bit

...

ignite20-all-dates_livecommunity-2600x600.png
jennaqualls by • Community Team Member
  • 2635 Views
  • 1 replies
  • 4 Likes

Resolved! Authentication error after upgrading to 7.0.x

Hi,

 

I've one issue after upgrading for one of my client from 6.1.6 to 7.0.7 regarding Radius authentication. Authentication was successful till we upgrade to the new version. After the upgrade we are getting the error “Number of Access Domains and ro

...

clienterror.png

3020 randomly shuts down

Hello. I'm hoping that someone might have some suggestions of what's happening here.
 
For the past week I've been dealing with a 3020 that randomly shuts itself down and requires a power cycle to get back online.
Thursday and Fri of last week we'd rand
...

dpsmith by • L0 Member
  • 1814 Views
  • 1 replies
  • 0 Likes

Resolved! Book for Palo Alto

Hello Everyone,

 

Hope you all are doing fine. I am new to PA firewall and just started to study PA concepts from PA forums. But i want to purchase book and study from it. Could someone please advice if below book would be good to start from scratch? .

...

Resolved! Trouble with IPSec Site2Site VPN

I am a beginner in the Palo Alto World.

I want to setup a Site2Site VPN to a customer.
The customer has a Palo Alto System running.

I cannot get the tunnel up.

The admin of the customer and me are troubleshooting the problems, but so far nothing is worki

...

c.keller by • L1 Bithead
  • 7256 Views
  • 8 replies
  • 0 Likes

Resolved! HA not working with interface monitoring any

Hello all,

 

i configured HA between paloalto peers , and HA failover as default without definig specifc interfaces and left it to "any"

 

when interface of inside zone shutdown from switch side , failover will not be trigered ? and need to fix it

BPA - Sanctioned apps

This might be a naïve question. But how does it help me/organization going through every single app and marking it sanctioned, tolerated or unsactioned. It seems to me of no use, other than for the reports for executives, while apps still get allowed

...

raji_toor by • L4 Transporter
  • 3176 Views
  • 4 replies
  • 0 Likes

Resolved! Globalprotect VPN tunnel interface-IP address

My global protect VPN's tunnel interface does not have an IP assigned but I would like to assign it a fictitious IP to enable tunnel monitoring/ dynamic routing.  will it cause any issues to the remote users? what role does this IP play in the tunnel

...

  • 24280 Posts
  • 99 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks