General Topics

Ignite 2021 is Two Weeks Away!

Hi everyone,

Ignite 2021 is just two weeks away and the LIVEcommunity team has been sharing weekly blogs to keep you updated on the latest news related to this event!

Last week we shared information about the Agenda. We also added some informati

...

Migrating from PA 500 to PA 820

Hi team

Can we directly take backup of PA 500 running PA OS 8.1 to PA 820 running PAN OS 9.0.

Thanks in advance.

Captive portal palo alto issued with chrome

Hi all

I use captive portal on palo alto just zone Lan to internet and found issued about chrome

My client have window 7,8 and palo version 8.1

Test on firefox need open firefox and click to option for login to internet

But on chorme not option for click

...

Migration FROM PA-850 to PA-3220

Dear:

Good afternoon, what is the best migration option from a Palo Alto PA-850 to a PA-3220.

Thinking for example to be able to keep the self-signed certificates in the PA-850, used for Global Protect.

Based on your expertix and experience, what is t

...

Resolved! Custom URL category *.github.com not matching/working

I read some posts here about the best way to allow github to only *.github.com IPs and I can't seem to find an easy way to do it.

If I do it this way:

Source IP – on-prem networks
Destination - Any
APP ID/Service – github/ssh/ssl/web browsing
URL c

...

Commit Lock

Hey all,

Has anyone found a way for a non-superuser to remove a commit lock?

I'm aware the official line still seems to be only a superuser can remove the lock, and this is definitely the case in PANOS 9.0 but hoping there might be a way to have this a

...

where to check to troubleshoot the VM Series issue, as we are getting errors for the VM Series Plugin validation Failed. Please suggest if there are any specific logs or packet capture we have to look into.

Error : - Resource-mgr-endpoint is invail

...

PA-3260 PAN OS 10.0.7 "Source User" Not Working

Hi - Trying to configure/setup source user however it is not working.

I configured my 2 domain controllers under Device\User Identification and added a valid domain account ,they show as connected.

All other settings are default , I am not sure what el

...

Cobalt Strike IPs and Application and Threat Updates

PAN provides anti-spyware signatures for Cobalt Strike Payload Traffic Detection and Cobalt Strike Beacon Command and Control Traffic Detection that are automatically downloaded to our PAN firewall. I also use the four External Dynamic Lists that PAN

...

Maximum number of disk supported in VM-Series model in AWS environment

Hi Team,

Could we get to know how many number of disks can be added to the VM-Series model in AWS environment.

I had gone through the TechDocs, It speaks about adding the additional disk-space to the instance. Whereas we couldn't find the maximum sup

...

Impact on Domain change

I have a situation where I need to change the domain but I couldn't understand how
is going to impact the production.

Currently, domain is abc.com and certs installed are *.abc.crt, *.xyz.crt.
Authentication profiles are also from the same domains abc.

...

Resolved! How to select firewall model

We are planning to have new firewall pair at one of our branch offices. Now we need to decide which model we should buy? Could you please help to know on which parameters we should decide our approach? We also need to consider future requirements and

...

Resolved! Radius - Issue Invalid Username/Password

Hi Everyone,

I firstly want to thank to whomever takes their time to read this post, and provide me with some further insight.

To get into it.

I am attempting to configure RADIUS for Admins on my VM running 10.0.7, in which is pointing towards a Wind

...

Resolved! Issues with SSL Forward Proxy in Lab Environment

Hi!

I've recently been trying to setup decryption on my PA-220 in a lab environment and have not been able to get it set up correctly so far. It is licensed, up-to-date, and currently running 8.1

The steps that I've taken so far are to setup a decry

...