General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! URL Filtering Issue

Hi,

 

Without URL Filtering in the Security Profile of the policy, we can access vimeo.com but with URL filtering profile, getting error message below in IE, Chrome and also on the phone. No proxy used, no SSL decryption. This is happening to the categ

...

Error.png
DetailedLogView.png
Farzana by L4 Transporter
  • 3129 Views
  • 4 replies
  • 1 Likes

Source zone - source address

If you enter a specific source zone but any for the source address what traffic is really allowed? Does is only allow addresses that are listed in the specified zone or is it truly any IP address?

jdprovine by L4 Transporter
  • 3870 Views
  • 11 replies
  • 0 Likes

Feature Request - Security Profile policy

Hi,

 

One thing about configuring security profiles is that when I like to change a security profile, there are so many security rules to update with the correct profile. I know I can change the profile itself and all policies using that profile will b

...

mgusta by L2 Linker
  • 3333 Views
  • 3 replies
  • 0 Likes

Problem Global Protect Behind NAT

Hello I have the following scenario:

 

-PA-3020 Edge Firewall who provide as internet access

-PA-200 LAN Firewall behind PA-3020

 

We are triying to configure Global Protect access for GP-200.

 

-I have a fqdn for the portal and gateway access which resolve

...

AitorGD by L1 Bithead
  • 3350 Views
  • 1 replies
  • 0 Likes

Resolved! VPN Timeout

Anyone know if there is a way to setup GP VPN to notify the end user before their VPN connection times out? Any feedback will be greatly appreciated.

 

Thanks

tbpowers by L0 Member
  • 1855 Views
  • 1 replies
  • 0 Likes

Strange Behavior with SIP traffic related to ALG

I'm running into an issue where specific NAT and Security policy names or numbers change then the SIP traffic stops working. I found that if I clear the sessions post change then everything starts working again. I believe this is related to ALG, lik

...

Packet Capture filters not correct

I have a problem once in a while where packet capture filters are not working.  I set up the filters at one point and if I delete the filters and set up a new filter.  Turn packet capture back on and it still gives me captures of the old filter.  I c

...

Getting old PA-200 back in IT life

Hello

i inherited on PA-200 on my new job and want to get it back on IT life. While booting i observed the CLI and this is what i got. Needless to say i have no responces to any command entered.

Is anyone abel to provide some info how to set it up agai

...

Traffic Logs - Multiple IP's

Hi,

 

Is there an easy way to monitor traffic logs on say 20 IP's to see if any IOC's are being hit? I'm guessing I could build a filter for each IP but I was hoping there might be a way to do it easier. These are not contiguous IP's so CIDR won't help

...

Resolved! Looking for screenshots of a bare metal restore on a 2050

I'm developing an SOP and require screen shots for the following steps:

  1. On the ‘Device’ tab, choose ‘Setup’ and configure the following:
    • On the ‘Management’ tab under ‘Management Interface Settings’, enter the firewall’s IP address, netmask, and defaul
...

PAN-OS 8.0.2 URL logs not showing up

Hi guys,

 

I'm running a new PA-VM-50 on 8.0.2 within Esxi.  The VM is fully licensed and has all the latest dynamic updates and URL filtering db.

 

VM License - VM-50
VM Mode - VMWare ESXi
Software Version- 8.0.2
GlobalProtect Agent - 0.0.0
Application Vers

...

Resolved! "Engine Fatal" error message in minemeld

Currently on version 0.9.38 and I'm getting a fatal engine error message. Tried restarting the engine I get this error message. 

 

minemeld-engine FATAL Exited too quickly (process log may have details)
minemeld-supervisord-listener RUNNING pid 1519, up

...

RobertWu by L0 Member
  • 3767 Views
  • 1 replies
  • 0 Likes
  • 24276 Posts
  • 99 Subscriptions
Top Solution Authors
Top Liked Authors
Labels