OSPF with Active/Passive HA

Hi,

I came across this design guide and looking at labbing this up for testing, as the design could be a good fit for our production environment, with a few tweaks. In my case, I'll be using OSPF between the firewalls and internal routers A and B. Th

IKE phase- 1 SA is expired every 10 seconds?

Just curious, has anyone every seen IKE phase-1 expiring every 10 seconds, can't seem to figure it out.

Thanks

Always Innovating in NetSec Series: March 2025

3 min read

In the March 2025 edition of the Always Innovating blog, Palo Alto Networks showcases our continued leadership in cybersecurity through cutting-edge advancements in threat detection, quantum security, and medical IoT protection. This month's highl

Conditional Advertisement, Revert Back Options

Good day all, I was working with PA support I may be just be getting confused with the information.

I'm trying to use conditional advertisement to advertise a single subnet via BGP only when another a particular learned route is down. I got this po

I have a problem with the network, please help me

please help me 

My problem is as follows:

When the user wants to access public ip servers (10.10.10.50 to 10.10.10.53)from within the network, he cannot
Although

any user online can access the servers easily

Clear DF bit for VPN

We have recently migrated our site-to-site VPN so it is now running between a PA-3020 > Cisco ASA 5510.  After the migration we discovered that one of our cross-site applications broke and the vendor determined it was because their application commun

URL filtering is not functioning as expected.

Hello Team,

We are experiencing an issue with URL filtering on a Palo Alto PA-440 running version 11.1.4 -h7. Despite having valid licenses, URL filtering is not functioning as expected.

Here’s what we’ve tried so far:

1. Cleared the cache and deleted

March 2025 Rewind: LIVEcommunity Highlights

6 min read

Welcome to our March 2025 Rewind, where we review some of LIVEcommunity’s biggest headlines from the past month!

In March, we featured articles and blogs on: a new Quantum Security page, the release of a new Support FAQ article, Threat Vector’

Service Accounts and GP

Situation is this, a normal user logs into a PC and GP auto connects.  User logs out and back in as a service account and GP does not auto login.  Any ideas?

creating a scheduled task or job to clear all sessions

Im new to Palo FW and was wondering if it was possible to create a scheduled task/job to clear all sessions daily at a specific time?

Question around unsigned binaries and Cortex XDR agent detections

Hi folks,

I've been administering Cortex XDR pro for a few years now and just lately in the last 3-4 months we've noticed that unsigned binaries that just got created(usually some of our internal developers testing builds) aren't automatically bloc

Monitoring the Cloud Identity Engine

Does anyone have a good method for generating an alert if the Cloud Identity Engine has failed to perform an on-prem or Azure sync in the last 24 hours?

Service Accounts and GP

Situation is this, a normal user logs into a PC and GP auto connects.  User logs out and back in as a service account and GP does not auto login.  Any ideas?