General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Filter security policies by no description

I am trying to view only security policies that do not have a description.  I have found the following links but am unable to get the output i need.  I need to show rules with no description and for all the operations i must define a valuen and all i

...

SSL Inbound Inspection with Active/Active HA

New to SSL Inbound Inspection here.  Running 8.0.10 at the moment.  Have a pair of 5050s running in active/active HA.  I think I have everything configured properly as it appears to be working, mostly. 

 

When I initiate a connection from client to ser

...

Captive Portal web form displaying basic auth in chrome

When I set up the Captive Portal and configure it for browser challenge, on non domain joined machines I get the following prompt before I'm sent to the web-form.  Is there any way I can get rid of this or at least get it encrypted so users aren't at

...

Capture.PNG
Lcroce by L1 Bithead
  • 2284 Views
  • 2 replies
  • 0 Likes

MineMeld - Feeds Authentication Verification

Hello Folks,

 

My MineMeld experience has been great thus far thanks alot for creating such a robust community product.

I set up authentication feeds recently and am curious where I can verfiy authentication is successful? 

Is this a Firewall Log or

...

Resolved! Firewall cert-SSL forward proxy-To actual destination,

I know for a fact that firewall intercepts SSL connection  and generates on-the-fly cert to clients under decryption scenario. But, I wasn't able to find enough resources explaning how firewall intitates connection to the actual destination on client

...

Missing fields in custom reports that would be useful

I am trying to make a more meaningful executive style report for user activity and web browsing. Currently the 'User Activity' report has columns which are not availble when generating a custom report; estimated browse time, count, bytes, etc. 

 

If I

...

mike406 by L2 Linker
  • 2580 Views
  • 1 replies
  • 0 Likes

DUO MFA and username with a space

8.1.2 platform

LDAP user with a space in the username "john smith@ldap.com"

Auth profile with sAMAccountName working fine for "john smith" tested from cli

GlobalProtect with single factor LDAP auth working fine externally for "john smith"

Auth policy for

...

Strange dataplane MGMT plane behaviour

Hi,

 

We are having strange behaviour with DP and MGMT plane.

 

We received these alarms:

 

 show log system | match severe

2018/07/20 12:00:02 high     general        general 0  Dataplane under severe load

2018/07/21 12:00:02 high     general        general

...

BigPalo by L4 Transporter
  • 2916 Views
  • 8 replies
  • 0 Likes

MineMeld docker based on centos / rhel?

Hello!

 

I have been looking for a docker image that is based on Centos / Rhel and not Ubuntu, but I cannot find any.

Is there any image beeing worked on?

 

Also, the Docker image runs root inside, which I cannot seem to change as I get the following

...

Resolved! User-ID Redistributed users not the log file

Hi Guys,

 

For one our customer we have two virtual cluster - frontend and backend firewalls. On the frontend firewall we have Global Protect enabled, with LDAP and User-Group Mapping, assign different access for different user group. Connected users s

...

Resolved! Any way to de-auth a user outside of SSH?

I know that we can force a logout for a user from the captive portal on the CLI as shown in the link below but is there a way to access this functionality through the web management portal?

 

https://live.paloaltonetworks.com/t5/Management-Articles/How

...

Lcroce by L1 Bithead
  • 2581 Views
  • 5 replies
  • 0 Likes
  • 24210 Posts
  • 99 Subscriptions
Labels