LIVEcommunity | Palo Alto Networks

How to Convert Device Specific objects (IP address or services) into Shared

Hi everyone, anyone know how we can how to Convert Device Specific objects into Shared with CLI command. same what done it on the GUI? Thank you in advance. Hamadah

How to Convert Device Specific objects into Shared

Hi everyone, Hope everyone is doing Great. I have one question regarding the shared objects and here is the problem I am facing. I am trying to find the best way to convert device specific objects(addresses, services, tags) into shared objects. I was...

Softphone connect issue on GP agent 5.2.8 version when primary DNS is unreachable in GP setting

The endpoint having GP client version 5.2.8, is having an issue to connect to Secondary DNS Server for SIP traffic only. The issue is occurring on 5.2.8 when the primary DNS is not reachable. • WFH users connected to VPN gateways, were having primary...

DNS Signature Lookup Timeout Error

I'm seeing quite a lot of messages logged in the syslog output from my PA VM-100 running PAN-OS 10.0.0: Aug 19 07:31:29 firewall-1 1,2020/08/19 07:31:29,007051000047085,SYSTEM,general,2560,2020/08/19 07:31:29,,general,,0,0,general,medium,"DNS signatu...

Cortex XDR Postman API Collection

What is Postman? Postman is the collaboration platform for API development. Postman simplifies each step of building an API and streamlines collaboration so you can create better APIs faster, you can download the postman community edition now. Why us...

Shutting down/disabling subinterfaces

I am very new to the PANOS world so I will apologize in advance if this is obvious, however my search of documentation and knowledebase did not yield anything. I have been looking for a way to administratively shut down sub interfaces. Is this possib...

Juniper SRX migration questions

Hi I'm working on an SRX migration (first time) and in Expedition, all of the policies are locked (there are only Security policies in this situation). I need to tag all of the rules with a specific tag as I'm combining three firewall clusters into o...

Adobe-Creative Cloud WildFire Virus alerts.

Hi, Since this morning June 17/2020 I have been getting Virus alerts in the Threat log. It has pointed out that ProxyResolverWin7.dll is the culprit. I went to a few machines and searched for ProxyResolverWin7.dll and uploaded it to VirusTotal. All c...

Migrate Panorama from Azure to ESXi is failed

I am trying migration Panorama with following procedure but have not succeeded, yet. https://docs.paloaltonetworks.com/panorama/8-1/panorama-admin/set-up-panorama/transition-to-a-different-panorama-model/migrate-a-panorama-virtual-appliance-to-a-diff...

Resolved! How Palo alto HA and Cisco HSRP work together ?

How Palo alto HA and Cisco HSRP work together ? For example ===========Here Palo alto HA is upstream devices ( lets consider PA1 and PA2 are in HA setup). Cisco Switches are catalyst 6509 or nexus 5 or 6K ( SW1 and SW2)SW1 is connected to PA 1 and SW...

vm palo question on interfaces for esxi

We have an exisiting vmware esxi environment that has 3 hosts with distributed switches configured. Currently, each esxi host has 4 links (all trunks) going to the physical uplink switch. We've installed a VM palo series firewall and have established...

Physical connections to vSphere cluster for VM-200

Hey folks, Can someone point me to a "best practice" design guide or white paper for making the physical connections to a vSphere cluster that will run a VM-200 virtual appliance? I'm only seeing configuration guides on deploying and setting up the V...

Global Protect Upgrade queries

Hi,We are currently going through an upgrade procedure to upgrade the 5.2.4 GP clients to 5.2.8. The portal agent config "Allow user to upgrade GlobalProtect App" is set to 'Allow with prompt'. I am moreorless there just have a few Q's about expected...

PA-460 GP clientless VPN only allowing max users of 20

Hi, PA-460 with PAN OS 10.1.1, only allows me to enter a max user value of 20 in the GP clientless VPN config. Palo Alto documentation says it supports 200. Is there anyway to change this or is this a bug? https://www.paloaltonetworks.com/products/pr...