LIVEcommunity | Palo Alto Networks

Authentication server option

I have a new Palo Alto 820 and my Radius server is a Juniper running 9.1 . At this time my Cisco and other device use a share key to Authenticate to the Juniper device. On the Palo 820 Pan os 9.1.4 it want me to use the following Auth methods "PEAP-M...

Panorama system logs -> Sending to Slack via HTTP profile -> NEED TO SEND PANORAMA DEVICE HOSTNAME

I am using an HTTP profile to send PANORAMA CRITICAL SYSTEM events to Slack. The integration is working well. My Panoramas are an A/P HA cluster. The issue that I have is that I'm unable to delineate the device names via the HTTP profile payload (bec...

Panorama takes excessive time to complete commit to firewalls, stuck at 50%

The push to the standby firewall occurs quickly (1-3 minutes).The push to the active firewall is stuck for a long time. I notice the config does finally get to the active firewall, but Panorama still shows push in progress.Note in the second picture ...

Thinking about moving from SonicWall NGFW to Palo Alto

My company has been using SonicWall for the last 7 years or so, and we're currently on a NSA 3600 (NGFW) HA pair for main branch and a TZ500 for a small remote office. The TZ500 is totally fine and the 3600 works ok for the most part but there are al...

Fetch RSA NetWitness incidents

Hello Guys,I'm trying to fetch RSA incidents, using RSA NetWitness v11.1 integration, but the error "get_token failed with status: 401(85)" appears, when I try to make the connection between the systems.Has anyone managed to integrate the two platfor...

HTTPS Response pages

Hi, I know that there are many threads here about this. We would like to show the response pages for https. We saw this link but i have several doubts:https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClFKCA0This command is en...

GP No Network Connectivity

GP No network connectivity on macOS devices irrespective of OS version.Error appears all of a sudden.

IKE SA negotiation is started as initiator, non-rekey

Hello :),I have a problem with VPN from PA-220 to Azure. The logs show this information : "IKEv2 IKE SA negotiation is started as initiator, non-rekey. Initiated SA " Every change I made it always is this same error. Is there any way to resolve this ...

Palo Alto firewall dual homed devices between two security zones

Is it possible to detect dual homed hosts connected to two or more security zones at the same time.

User's traffic not hitting correct security rule.

We're running into an issue where a rule that is meant to update anti-virus protection on port 443 is slipping through and being caught by a lower rule which denies any application and service. (Hardware: PA-5050, OS version : 8.1.6).As far as the se...

Using the Panaroma as a central manager for Cisco AnyConnect.

Team,Any one aware if we can even use the Panaroma a a central manager for the Cisco AnyConnect firewall?My use cases are: 1. Central management and to push policies to the Cisco AnyConnect. 2. Ensure policies are in sync and same across all AnyConne...

Xsoar: Retrieve file which has been quarantined by Cortex XDR

Hello Guys, I'm trying to retrieve a file that has been quarantined by Cortex XDR using an XSOAR playbook. I trace the Action ID in XDR but I always find it failing. However, it's always working for non-quarantined files. I need to retrieve the file ...

Any trusted EDL of known TOR entry and exit nodes?

I am looking to block TOR IPs inbound and outbound on my perimeter firewalls. Do any of you know of any trusted list of TOR nodes which I can use in EDLs? Thanks.

Firewall is sending traffic when becoming passive for a few minutes

Hello friends, I am experimenting a strange behaviour. When performing a manual failover with the command: request high-avaliability state suspend, the firewall that become passive continues sending traffic to the BGP peers for about 3 minutes (ICMP ...

ISP interoperability request

Major US based ISP looking to connect with GlobalProtect engineering to improve interoperability on network . Looking for an official support escalation channel. PM for email.