LiveWeek 11 Aug 2017

by ‎08-11-2017 01:43 PM - edited ‎08-17-2017 08:27 AM (4,300 Views)

Terraform templates help quickly and easily deploy and secure critical applications on the Palo Alto Networks Next-Generation firewall for public cloud environments like AWS and Azure. LSVPN -- the video version. Generating certificates from CSR for decryption. Our member shows how to bypass SSL decryption for an application. How to make the firewall a responder-only in an IPSec tunnel. FAQs on the ACC.  What has 2818 subscribers, 204,476 views, and more than 100 action-packed videos? Tweet that!


Video Tutorial: Large Scale VPN (LSVPN)

by ‎08-10-2017 01:09 PM - edited ‎08-14-2017 04:42 PM (3,514 Views)

If you'd like to know more about Large Scale VPN, what it is and how to configure it, then click to watch the Video Tutorial on LSVPN.




Generating Certificates from CSR for Decryption

by ‎08-10-2017 06:20 AM - edited ‎08-11-2017 10:25 AM (4,115 Views)

Learn how to leverage enterprise Public Key Infrastructure (PKI) to generate SSL decryption certificates. Use the firewall to generate a Certificate Signing Request (CSR) and have an AD Certificate Authority (CA) issue a Sub-CA certificate for trusted SSL decryption.


How to bypass SSL decryption for an application

by ‎08-09-2017 11:31 AM - edited ‎08-09-2017 11:36 AM (7,129 Views)

Sometimes you need to get creative to make your customers happy. This contribution by a community member drew my attention and could be useful to administrators trying to find a solution to the same question.


Unit 42's LabyREnth CTF announces contest winners!

by ‎08-04-2017 06:21 PM - edited ‎08-04-2017 06:30 PM (3,556 Views)

Did you escape the LabyREnth with all the loot? Not you? Then who? Check the contest wrap-up from Unit 42 -- winners, finishers, challenge stats and more to see how this year's contestants fared. Then start practicing for next year now!


LiveWeek 4 Aug 2017

by ‎08-04-2017 01:14 PM - edited ‎08-11-2017 01:53 PM (3,734 Views)

The Palo Alto Networks VM-Series touts a new public cloud integration portal. We need your help to keep it going. Rapidly deploy the VM-Series in both private and public cloud environments and showcase your success. Epic-ID for Electronic Medical Records (EMR) enjoys a healthy life in the Live Community. Learn about admin sessions, viewing the management interface via the CLI, and insight into NS, ND and NB session flags. Add generous helpings of YouTube and Twitter, and you've got a time-tested recipe for security and success.


New Public Cloud Integration Portal

by ‎08-03-2017 12:24 PM - edited ‎08-03-2017 03:11 PM (8,898 Views)

A few recent VM-Series efforts allow Palo Alto Networks customers to more rapidly deploy the VM-Series in both private and public cloud environments. Take a look at what we've done, including case studies, and see how you can contribute.


LiveWeek 28 Jul 2017

by ‎07-28-2017 09:53 AM - edited ‎07-28-2017 08:18 PM (3,956 Views)

Best practices for PAN-OS upgrade, especially if you're just getting in the game! Packet capture option missing under Monitor tab -- what if multiple administrators with role-based access monitor the firewall? With PAN-OS 8.0, TACACS uses authorization from the TACACS server to log into the GUI or CLI -- we show you how. Visio and Omnigraffle stencils are back. Questions #GetAnswers here. Check our latest on YouTube and Twitter. Subscribe and follow. All good things -- here in your Live Community.


LiveWeek 21 Jul 2017

by ‎07-21-2017 09:12 AM - edited ‎07-25-2017 09:12 AM (4,572 Views)

A week of great videos: enabling, disabling, and cloning rules. Filtering the security policy. Watch GlobalProtect Clientless VPN reach remote outposts through third-party middleware. Read about DNP3 new App-ID release for SCADA systems. Visio stencils are baaaack! View Ansible videos on YouTube and subscribe to our channel. Follow us on Twitter, join in our discussions, and give and #GetAnswers non-stop here in the Live Community.


LabyREnth CTF 2017 Final Week: Beat the Maze!

by on ‎07-18-2017 08:46 AM (4,105 Views)

The LabyREnth Capture the Flag (CTF) challenge ends in less than a week - Sunday, July 23! In the final hours of the LabyREnth challenge, do you have what it takes to defeat the goblin king? 


Tutorial: How to enable/disable/clone rules!

by ‎07-17-2017 09:06 AM - edited ‎07-24-2017 12:16 PM (4,267 Views)

Simple yet powerful tools to play with on the Palo Alto Networks Next-Generation Firewall. Check out this tutorial to learn all about disabling/enabling and cloning rules!



LiveWeek 14 Jul 2017

by ‎07-14-2017 10:01 AM - edited ‎07-14-2017 12:29 PM (4,454 Views)

Why choose Palo Alto Networks? How to convince leadership to harden security. How to use a certificate to authenticate iOS clients to GlobalProtect. What is the best way to use the migration tool when using Panorama to manage firewalls? Why do routers run on the management plane? Q&A from the 'great wall of answers.' Our turn: Where's the craziest place you've deployed a Palo Alto Networks Next Generation firewall?


#GetAnswers from Ignite Q&A | kiwi

by ‎07-11-2017 05:29 AM - edited ‎07-27-2017 03:06 PM (5,142 Views)

More posted questions and answers from the booth @Ignite! Topics include Aperture, API, best practices, GlobalProtect, LightCyber, log forwarding, firewall management, MineMeld, Panorama, Traps, User-ID, VPN, and WildFire. Got questions? #GetAnswers here.


#GetAnswers from Ignite Q&A | reaper

by ‎07-11-2017 04:39 AM - edited ‎07-27-2017 01:15 PM (12,095 Views)

Ignite brought many different questions posted on the wall of #GetAnswers. We already selected the 'best of' but wanted to share all of them for your information and entertainment. Got questions? #GetAnswers here.


#GetAnswers from Ignite Q&A | jdelio

by ‎07-10-2017 03:30 PM - edited ‎07-27-2017 01:12 PM (5,193 Views)

Miss out on the excitement at the Live Community booth at Ignite? Read some of the questions and answers posted in the booth. Topics include configuration and management, GlobalProtect, the Migration Tool, Panorama, SaaS, Traps, User-ID, and VPN. Got questions? #GetAnswers here.


LiveWeek 7 Jul 2017

by ‎07-06-2017 11:45 PM - edited ‎07-12-2017 09:15 AM (4,549 Views)

Where is the craziest place you’ve had to deploy a Palo Alto Networks firewall? Any tips? See how our firewall can safely enable the double-edged sword of webmail applications, protecting against threats and more. Celebrate Okta integrations with (1) GlobalProtect Clientless VPN SAML SSO with Okta and (2) Okta SAML applications with the firewall acting as service provider for various end points. LiveWire summer issue. Grab the popcorn and settle in on our YouTube channel. Follow us on Twitter. Got questions? #GetAnswers, great videos, crazy stories and more, right here in your Live Community.


LiveWeek 30 Jun 2017

by on ‎06-30-2017 12:40 PM (4,684 Views)

How does GlobalProtect determine the gateway? How do you record URLs without a URL filtering license? Should we be using the default actions for spyware? Filtering the security policy. New features in the Live Community. Ignite highlights. Meet our Live Community Sentinels. Find your way through the LabyREnth and on to reward -- let your Live Community show you the way.


Unit 42 LabyREnth Capture the Flag Outs aMAZEing Skills!

by ‎06-28-2017 11:46 PM - edited ‎06-29-2017 12:00 PM (5,018 Views)

We’re halfway through Unit 42’s LabyREnth Capture the Flag (CTF) competition, and things are getting interesting. Malware reverse engineers and threat experts across the world are testing their technical skills in binaries, threat intelligence, programming, and more. Armor has been acquired, tears have been shed, cows have been spotted… Plus, puppies! How about you? Have you escaped the LabyREnth yet?


New Live Community Features - June 28, 2017

by ‎06-28-2017 02:26 PM - edited ‎06-29-2017 08:10 AM (4,539 Views)

Want to know about all the new features on the Live Community site? Click to see what Joe has to say about new features of the Live Community.


Petya cyber attack - what's it all about?

by ‎06-28-2017 12:33 AM - edited ‎07-31-2017 02:57 PM (6,012 Views)

Petrwrap/Petya ransomware. A major ransomware attack brings business to a close throughout Europe, in an
infection reminiscent of the WannaCry attack.


Tips & Tricks: Filtering the security policy

by ‎06-26-2017 07:27 AM - edited ‎07-24-2017 12:21 PM (15,187 Views)

When 'wrangling' a lengthy security policy becomes a chore, some filtering may make your life a little easier.



Ignite '17 edition, Kiwi's favorites Part 2

by ‎06-26-2017 12:51 AM - edited ‎06-26-2017 04:34 PM (4,273 Views)

Part 2 of questions directly from Ignite. How does GlobalProtect determine the gateway? How do you record URLs without a URL filtering license? Should we be using the default actions for spyware signatures?


LiveWeek 23 Jun 2017

by ‎06-23-2017 12:14 PM - edited ‎06-23-2017 04:51 PM (4,015 Views)

We take on your questions from Ignite: What is a User-ID? WildFire on analyzing other file types. GlobalProtect over SSL to avoid VPN detection. Syncing downloads across an HA pair. Recommended naming scheme. Panorama as a management and logging device. When to request a Support Event. Tips from the field: Chrome OS Deployment Methodologies for K-12. Finally, we need to know why the chicken crossed the road. Subscribe to us on YouTube, follow us on Twitter, and follow the good example of that road-crossing chicken!


Ignite '17 edition, Reaper's favorites Part 2

by ‎06-22-2017 11:16 AM - edited ‎06-22-2017 02:49 PM (3,533 Views)

Part 2 of the questions from the #GetAnswers wall at Ignite: Wildcard search in Traffic Monitor. Pre or post policy with Panorama? Base version when upgrading the firewall, and syncing downloads across an HA pair. App-ID or service/standard ports with traffic? Best method to intro span VLANs. 


Ignite '17 edition, Jdelio's favorites Part 1

by ‎06-21-2017 03:00 PM - edited ‎06-22-2017 01:26 PM (3,621 Views)

Read some of Joe's favorite questions from Ignite and get a peek into the Ignite booth (video). More on TAP interface. GlobalProtect over SSL to avoid VPN detection. Panorama as a management and logging device, and the chicken crosses the road again!


Ignite '17 edition, Kiwi's favorites Part 1

by ‎06-20-2017 08:17 AM - edited ‎06-21-2017 05:52 AM (3,544 Views)

Questions, directly from Ignite. A few of my personal favorites: What's the recommended naming scheme? Can I change severity of logs? When will WildFire be able to analyse other file types?


Ignite '17 edition, Reaper's favorites Part 1

by ‎06-19-2017 04:17 AM - edited ‎06-22-2017 06:59 PM (3,737 Views)

Questions from the #GetAnswers wall at Ignite. A few favorites: What is a User-ID? Why can't we do an object with IP range? How does NAT work with VWire? Best practice for User-ID for Mac OS-X. Can WF-500 private cloud scan the same file types as the public cloud? 


LiveWeek 16 Jun 2017

by ‎06-16-2017 03:12 PM - edited ‎07-26-2017 01:45 AM (3,605 Views)

Ignite in review, with appreciation for a larger-than-life #GetAnswers community of members like you.



Check the Live Community Ignite blog, Twitter, and our YouTube channel for all the latest on Ignite. See announcements for new and exciting technology from Palo Alto Networks. Join the Live Community and lend your voice, your knowledge, and your skill to something that's larger than the sum of its parts.


LiveWeek 9 Jun 2017

by ‎06-09-2017 01:45 PM - edited ‎06-12-2017 10:39 AM (3,467 Views)

Progress with EMR or Electronic Medical Records through Epic App-ID. What's a TAP interface and what can it do? Learn to configure source NAT on the PAN-OS GUI. LiveWire Special Ignite Edition is here! Tech Docs delivers a treasure trove. Can you escape the LabyREnth of Unit 42? Do try - save the cyberworld and win a whole lot of $$$$$ to boot. Watch us on YouTube, follow us on Twitter, and meet us at Ignite.


Can you escape the LabyREnth from Unit 42?

by ‎06-09-2017 12:55 PM - edited ‎06-09-2017 01:12 PM (3,433 Views)

The goblins are at the gate, and in this final hour it’s time for your many hours studying the blade, mastering the blockchain, and cultivating inner strength to be put to use. You’ll have until 4:00 p.m. pacific time on July 23, 2017 to test your mettle against the seemingly endless hordes of more than 25 security challenges. Will you answer the call?


Ask Questions Get Answers Join the Live Community