General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

Resolved! Global Protect authentication happened two time while using RADIUS

Hi Team,

We have faced the Global Protect authentication that happened two times while using the RADIUS server.

First, I am trying to connect to VPN and enter the user name and Password after the OTP has asked then entered the OTP after, again the

...

Resolved! Why have I been sinkholed?

I former colleague just notified me that he couldn't get to my site https://normative-technology.org/ because it is CNAMEd to sinkhole.paloaltonetworks.com .

I understand what a DNS sinkhole is (in fact, I'm using them myself), but not why my domain

...

SMC SSD Failure Detection : Press F1 to Resume

I recently stumbled upon this error and found very little documentation on the subject that I only found after the fact. On the SMC of the 7000 series firewalls, there is a SSD. This SSD will fail over time. I found out when rebooting after an upgrad

...

Resolved! No Super User to authorise my Support Portal account

Hello.

I need to download the PaloAlto Terminal Services user-id agent.

To download this agent, I need to have a PaloAlto Customer Support Portal account.

I went through the process of setting up a Support Portal account, using my device serial num

...

XSOAR - for an environment of 26 Palo Alto Firewalls + 4 PANORAMA - is it worth it?

XSOAR - for an environment of 26 Palo Alto Firewalls + 4 PANORAMA, is it worth it?

Hello, good evening to the community, thank you for your time and collaboration.

I have some doubts regarding some points, which is what a certain partner commente

...

Resolved! bgp neighbour state

Hi，Bro

The bgp neighbor GUI displays idle and the CLI is established. Is this a bug? Does anyone encounter the same problem? The customer's version is panos 10.1.6.

Resolved! LSVPN running under mixed versions

I currently have my entire environment running on V9.1.15-h1. We currently plan to upgrade the data center VMs and 3220 to 10.1. These also will contain the GP portal and the LSVPN portal. With the firewalls (many 3020s) staying on v9.1.15-h1, wil

...

POC - To validate everything associated with Machine-Learning/Deep Learning PAN-OS - Features of URL Filtering, Wildfire, Threat Prevention Test

Setting up a POC - To validate everything associated with Machine-Learning/Deep Learning of PAN-OS - Features of URL Filtering, Wildfire, Threa Prevention Test.

-Hello Livecommunity, good afternoon, thank you for your time, for your collaboration,

...

Firewall Config Templates(network) not showing up in Panorama

Yesterday we had to reboot one of our firewalls that is managed by the panorama. After the reboot, we noticed that half the config is no longer showing in the panorama. Everything appears to be ok locally on the firewall (panorama pushed config and i

...

Resolved! Can SAML Azure be used in an authentication sequence?

Some users need to be authenticated using MFA with SAML and azure, and some others need to be authenticated using SSO.

Can this be done using an authentication sequence?

Ike -generic event : vendor id payload ignored

We are seeing continous ike genric event for vendor id payload ignored , tunnel is up traffic getting encrypted and decrypted.

what exactly does above error say.

Resolved! Given Tunnel Interface IP is wrong but still tunnel is up

I am seeing the Ip address give to the tunnel interface is wrong ( for the tunnel with AWS) , but tunnel came up and working without any issue.

Can anybody suggest on this. Would the IP address which we will give to the tunnel interface would not matt

...

Resolved! Behavior of the 3 possible options -SIP flow with TCP - SIP TCP cleartext

Hello good afternoon everyone LiveCommunity.

For an environment with TCP-SIP with the ALG disabled at App "SIP" level and/or with AppOverride, I would understand that these options should no longer generate any noise, problem or unwanted b

...

How to get/send DNS logs to on-prem SIEM -- DNS Proxy + DNS Security

Hello Community!

Wondering if anyone has this scenario / has experience with retrieving DNS security logs...

Remote Site Firewall setup:

- DNS Proxy Enabled (Rules direct internal domains to internal DNS servers across SDWAN, all other DNS request

...

SWITCHING PANORAMA VM FROM LEGACY MODE TO PANORAMA MODE failing

- We are trying to switch the Panorama device from Legacy mode to Panorama mode

SWITCHING PANORAMA VM FROM LEGACY MODE TO PANORAMA MODE

- https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPTzCAO

- Currently running on 8.1.x v

...

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

How and Why to Accept a Solution to Your Post

Resolved! Global Protect authentication happened two time while using RADIUS

Resolved! Why have I been sinkholed?

SMC SSD Failure Detection : Press F1 to Resume

Resolved! No Super User to authorise my Support Portal account

XSOAR - for an environment of 26 Palo Alto Firewalls + 4 PANORAMA - is it worth it?

Resolved! bgp neighbour state

Resolved! LSVPN running under mixed versions

POC - To validate everything associated with Machine-Learning/Deep Learning PAN-OS - Features of URL Filtering, Wildfire, Threat Prevention Test

Firewall Config Templates(network) not showing up in Panorama

Resolved! Can SAML Azure be used in an authentication sequence?

Ike -generic event : vendor id payload ignored

Resolved! Given Tunnel Interface IP is wrong but still tunnel is up

Resolved! Behavior of the 3 possible options -SIP flow with TCP - SIP TCP cleartext

How to get/send DNS logs to on-prem SIEM -- DNS Proxy + DNS Security

SWITCHING PANORAMA VM FROM LEGACY MODE TO PANORAMA MODE failing

Unable to download new version

Edit personal information

best practice assessment option is not showing in paloalto customer portal

change default static route

Monitor Logs - filtering with wildcard?

Re: What is still missing or needs to be improved in PA Next Generation Firewalls ?

Re: Solution for "SSL decryption bypass for Anydesk"

Re: Failed to update content package

Re: Solution for "SSL decryption bypass for Anydesk"

Re: Error installing dynamic update Apps

Unlock your full community experience!

Resolved! Global Protect authentication happened two time while using RADIUS

Resolved! Why have I been sinkholed?

Resolved! No Super User to authorise my Support Portal account

Resolved! bgp neighbour state

Resolved! LSVPN running under mixed versions

Resolved! Can SAML Azure be used in an authentication sequence?

Resolved! Given Tunnel Interface IP is wrong but still tunnel is up

Resolved! Behavior of the 3 possible options -SIP flow with TCP - SIP TCP cleartext