General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 358 Views
  • 0 replies
  • 0 Likes

No management access https since upgrading to 6.0.1

I have upgraded several devices from 5.0.8, but of course the last one has to give me grief. Since upgrading from 5.0.8 to 6.0.1, I can no longer ssh or https to the management port (or any other interface on the firewall). The only way I can get on

...

froggyj by Not applicable
  • 7987 Views
  • 6 replies
  • 0 Likes

Unable to commit

I have a PA-200, managed by Panorama and running 7.1.7. All of the sudden I can no longer commit to the firewall, and I get the error:

 

Details:

. Internal error during commit processing
. Commit/Validate failed. Invalid configuration.

 

Logs on the firew

...

Skype no audio with allow rule

Dear Team,

 

Recently we have experianced a skype no audio issue with the latest skype version. We have allowed skype and skype-probe to a test PC and still we have no audio. But when I do a any application allow then we get clear audio. However, with

...

Panorama CLI Help

Trying to script some panorama configuration and trying to figure out how to do the following:

 

  • Is it possible to add a managed device to Panorama from the CLI
  • Is it possible to create a template-stack from the CLI?

Resolved! feed authentication with PAN-OS 8.0

I have enabled feed authentication on our MineMeld Server:

https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Minemeld-Feed-Password-OR-api-security/td-p/131716

 

I did a quick test with curl and it works as i expected.

 

Unfortunataly our PAN

...

panos.png
faeppli by L1 Bithead
  • 5071 Views
  • 2 replies
  • 0 Likes

gamenet.ru false-positive

Hello,

I represent GameNet technical support service (www.gamenet.ru). We are designed an application QGNA for our customers (over 10 000 000 people) for game launch.

Direct link for test on VirusTotal:
https://www.virustotal.com/ru/file/6f6f19e994c1c

...

Resolved! Monitor subinterfaces and get NetFlow statistics

Hi,

We have a PA-5020 and configured a few AGG interfaces with subinterface; recently, we installed a SolarWinds NTA to get NetFlow statistics, but I am not able to get anything from this device.

I have created a profile and applied to the subinterface

...

MMCiobanu by L3 Networker
  • 12851 Views
  • 20 replies
  • 0 Likes

Resolved! blocking apps on non-default ports

Hi,

 

Sadly don't have PA to play around at the moment, so have to pass this question for all you out there as I'm sure I cannot be first one with such an idea.

 

What is the best way to block apps on their non-default ports?

Basically, allow apps ONLY on

...

nikoo by L3 Networker
  • 3997 Views
  • 4 replies
  • 0 Likes

Resolved! Can I enforce security based in AD Computer groups yet?

I see history here indicating the user-id agent has been blind to computer names when the group membership is added to user IDs.  The CLI DOES show the computer name as a userID (with a post-pended $) and the groups are mapped correctly to the comput

...

JWileyR by L1 Bithead
  • 3863 Views
  • 3 replies
  • 0 Likes

Anti-spyware Profile Rule category explanation

Does anyone have some document that explain the different categories in Anti-Spyware profiles? They're kind of self explaining, but does anyone have a document similar to the URL category explanation?

 

Thanks

17098052_10207743432858343_7241440398395006066_o.jpg
gtomte by L3 Networker
  • 4047 Views
  • 4 replies
  • 1 Likes

Resolved! FTP Protocol Injection Bypass Palo Alto Firewall

Hi 

 

About  News SMTP over XXE attacks against Linux-based firewalls.

- link (https://www.bleepingcomputer.com/news/security/java-and-python-contain-security-flaws-that-allow-attackers-to-bypass-firewalls/)

 

How we can create custom signature or  disab

...

  • 24057 Posts
  • 115 Subscriptions
Top Solution Authors
Top Liked Authors
Labels