General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

 

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! 

 

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 670 Views
  • 0 replies
  • 0 Likes

Global Protect fails to connect Apple iOS

Hi all,

We're encountering an issue when trying to connect to our VPN using the GlobalProtect app on iOS. After entering the portal address, the app redirects to Azure AD for authentication. Once credentials are entered, we receive the following erro

...

IMG_3316.jpg

Microsoft WNS App ID

I work with a network scenario where we have two firewall towards the internet and the desktop PCs are behind PaloAlto as perimeter and Cisco as internal firewall, so we can compare the same traffic whether it is identified properly or not.

 

It seem

...

About side scrolling in the UI

Hi. I'm used to do side scrolling in Chrome by using this combination: shift + mouse wheel.

 

But when I try that (for example in the Policies tab) i get "diagonal" scrolling.

 

I think that current implementation of scrolling relies on javascript. You s

...

Palo Alto Networks Approved
Palo Alto Networks Approved

Download executable GP from mobile phones

Hi,

I wanted to know if it's possible in Palo Alto, when you connect to the portal via https://vpn.xxx.com and authenticate from mobile phone, that instead of displaying the laptop executables, you get a redirect to the app market or the option to do

...

BigPalo by L4 Transporter
  • 117 Views
  • 2 replies
  • 0 Likes

VPN tunnel monitoring/alerting

When NOT using tunnel monitoring and keying off events ids for "tunnel-status-up/tunnel-status-down",  what is the best logging to alert on for tunnels going up or down?

Is it only alertable/trackable by 
( eventid eq 'ikev2-nego-ike-dpd-dn' )


Or is the

...

Sec101 by L4 Transporter
  • 63 Views
  • 1 replies
  • 0 Likes

decryption error with Anydesk

Dear Community!

 

I´m trying to use Anydesk and it only works with decryption policy disabled, somehow the predefined exclusion for Anydesk is not working.

While checking the decryption logs I can see the following error:

"tlsv1 alert insufficient se

...

Palo Alto Networks Approved
Palo Alto Networks Approved

Resolved! Source Address - Show ipv4

I just upgraded from a PA 500 to a PA 820 and something is throwing me for a loop.  In all of my reports and in the monitoring section under App Scope the firewall is reporting what appears to be ipv6 addresses, they are in the format of: "::678b:540

...

Screen Shot 2021-07-08 at 8.26.00 AM.png

Can ACC data really display data per user group?

Hello!

 

I´m trying to filter data, in particual user activity, by using filter "user group" however I only have the data filter by user or IP, not using the group.

 

Do you know if you can actually filter data from any widget of the ACC by using the

...

Issues GP in Iphones

 

 

On iPhone, the  gw for SAML authentication does not open the system browser (Safari). It opens the embedded browser. We configured the "default browser" in APP config like YES. 

In android is working fine but no in iPhones. Why? any incompatibili

...

BigPalo by L4 Transporter
  • 255 Views
  • 4 replies
  • 0 Likes

versions 10.2, 11.1, 11.2 - which is best?

of the current trains 10.2, 11.1, 11.2, which would be the best in terms of robustness and stability?  I am running PA-440 and PA-3250.  The later trains dont have any features i need over and above what is available in 10.2. 

Unable to HTTPS or SSH into new out of the box PA440

Had a new PA440 delivered to a remote location. I am able to ping the device (192.168.1.1) but am not able to HTTPS or SSH into it. Assuming that my IT person at the remote location has the device plugged into the MGT port and in the switch, which si

...

dahoove by L1 Bithead
  • 5522 Views
  • 8 replies
  • 0 Likes
  • 24118 Posts
  • 117 Subscriptions
Top Solution Authors
Top Liked Authors
Labels