General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! External Email Server Filtering

We have a ListServ server which needs to accept email from a user hosted in Office 365.  I would like to limit the security rule allowing the inbound traffic to only accept SMTP connections from the O365 mail servers.  I know the list of those server

...

PALO ALTO PAN OS 8.0

Hello Team,
I am a SOC ANALYST , I wanted to know all the "Event name" that i can see on my SIEM. so i can make sure that i am seeing all the events. Please help. I want to make sure if any "Event Name" is missing.
Currently I am seeing these "Event Na

...

Resolved! custom url filter action continue and ssl decryption

i have configured few custom url and action is set to continue.

for some https websites i get response page and when i click on continue it works fine.

 

for some https websites chrome shows error connection reset.

PCaps on PA does not show any drops.

tra

...

MP18 by Cyber Elite
  • 4901 Views
  • 8 replies
  • 0 Likes

Resolved! Command line

I have come accross and article that show some of the CLI commands for palo alto but there aren't that many listed. When I call into support they are able to come up with som many more anyone know where I can get a larger listing?

infotech by L4 Transporter
  • 6808 Views
  • 6 replies
  • 0 Likes

Resolved! Tunnel monitoring using internal src to external dst?

Is it possible to monitor VPN tunnels using an internal source IP on my tunnel interface and the external IP of the other system? I won't always have control/access to the other side of the tunnel, I may only know the local subnet(s) and the external

...

mike406 by L2 Linker
  • 3346 Views
  • 6 replies
  • 0 Likes

IPsec tunnel Failover between Two PA

I've two Palo Alto firewalls, PA-500 and PA-820.
My PA-500 is having 2 ISPs, so I've configured Tunnel monitoring as Failover on it. I think I've configured everything at right place on PA-500 which have 2 ISPs.
I'm not sure with the configuration at o...

Pune_IT by L0 Member
  • 2940 Views
  • 6 replies
  • 0 Likes

dp-monitor.log entry meanings?

We are running 8.1.4 on a pair of 820's, and having been having some issues with certain traffic. After some help and digging, we are seeing random hits an (entry below) for the Max % utilization for 100% in one part of the file, but NOT on show runn

...

Sec101 by L4 Transporter
  • 4075 Views
  • 3 replies
  • 0 Likes

Google Snake game

We have students in our academy playing the Google snake game, obviously this is really a classroom mamangement issue.

But we do have students in isolation and when Cover teachers that are unfamiliar with our monitoring software.

Is there a way we can

...

Resolved! IKE1 tunnel up without interesting traffic

 

i have configured the ike1 tunnel with ASA.

Right now there is no interesting traffic passing.

 

i initiated the traffic via cli to test the tunnel 

 

i see on gui under status - tunnel info and ike info both are green also i see tunnel interface is gree

...

MP18 by Cyber Elite
  • 3350 Views
  • 3 replies
  • 0 Likes

Resolved! PAN-OS 9.0?

Is there a list of features somewhere that PAN-OS 9.0 is supposed to support?

Rumor is that 9 will support true HA in Azure with session persistance, but cant find anytihng on it, and curious how that will function with Azures lack of L2 support.

Muldov by L1 Bithead
  • 2297 Views
  • 3 replies
  • 0 Likes

Resolved! Which IP address should I use for IPSec tunnel monitoring

Hello,

 

I made an IPSec Tunnel with Fortinet device, and it has some issue.

 

So I want to set tunnel monitoring for the tunnel, but I'm confused about the destination IP.

 

I set my tunnel interface ip(192.168.88.1/24), but at fortigate, it's not set.

 

I

...

yhlee1 by L2 Linker
  • 3210 Views
  • 2 replies
  • 0 Likes

Global Protect Dropouts

Hi, 

 

I keep getting dropouts,  from global protect.  It will say connected but I'm not able to remote to other machines that I know are on the network and then will disconnect and re-connect for some unknown reason like every minute or so. I looked t

...

Capture.PNG

Resolved! 8.0 HA Failover and IPSec VPNs

I am getting ready to do a failover test. Runnig a pair of PA-5220s in HA Active/Passive.

 

I see posts asking about what happens with IPSec VPN connections, but they are a few years old. Just want to confirm that with 8.0 the failover is still seamles

...

mike406 by L2 Linker
  • 2204 Views
  • 1 replies
  • 0 Likes
  • 24253 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels