General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! How to filter policies by zone

Hi,

Is there anyway to filter the policies by zone? or other parameters? Is there any guide about this?

Thanks a lot.

AWS Palo Alto and Configuring Interfaces

I'm new to AWS, but not new to Palo Alto. We are at the initial phases of building out our AWS environment. I'm getting familiar with AWS but not an expert by any means. I thought I'd start with a trial version of Palo Alto for AWS. At any rate, I've

...

Resolved! User Activity Report for Managers

Management has asked for a weekly summary of department web activity on our new PA-500.

I created a User Activity Report for each department but these reports are not conscise and difficult to read, especially for managers who would like a summary.

...

ESM service account rights

When I try to install the ESM core and console with a service account that does have the logon as a service rights but not administrator rights, I keep running into issues. As I don't like to grant full admin rights to a service account on a box I'd

...

Resolved! Trusted Root CA Not Installed on Client?

This is on a PA-3020 running PAN-OS 7.0.4.

I've always manually chained certificates when installed an SSL certificate for Global Protect. I decided to see if I could install the SSL certificate and the Intermediate certificates separately and see

...

Resolved! Firewalls accessing Panorama: best practice

Hi,

I'm looking for a best practice when deploying Panorama accross multiple sites that do not really have any interconnections (and have quite a few overlapping subnets).

From what I understand, the firewalls themselves initiate the connection tow

...

Resolved! Convert Template to Template Stack

We use Panorama to manage our firewalls and have a template configured with settings for all of our devices. I would like to split the devices by region for administrative access and would like to retain the current settings in the template. I can cr

...

Panorama: dynamic updates to clients

Hi,

I've added two VM-100's to Panorama and placed them into a device group. Connectivity is okay, deploying templates goes fine, but for some reason when I try to configure Panorama to shedule dynamic updates to the VM's, they don't show up in the

...

Response Page on Internet Zone

Hello Community,

our customer has a Cluster of PA-3020 with PANOS 7.0.2.

We have enabled Application Block Page and the Internal users can view it properly.

Customer has a rule to permit Web-browsing traffic from Internet to DMZ.

When users try

...

Policy Based Forwading Capability Question

Hello All, Was just wondering if anyone may be able to help with this our question.

Please see the attached High Level Diagram. Both Firewalls are PA 3020's with the full licence set enabled. We need to replace the ISA server which is not providing

...

Custom Vulnerability Signature. Is this limitation correct or is a fail?

Hello

I've been trying to create a custom vulnerability and I have encountered this limitation:

Currently in Threat Database Vault 529 version there are 50 signatures for PHP.

I'm trying to add all PHP signatures and this message appears when it excee

...

I want to know some details about a specific threat signature.

Hello everyone

I have this threat signature.: "NUCLEAR Exploit Detection Kit (38268)" , and I'm researching on what date was it created?

I need to know which version of the threats database was included and released this signature?

I would greatly app

...

Resolved! Zone Protection exception

Hello,

We’ve a problem with one of our customer.
Probably due to a carrier router misconfiguration, packets coming from - and only - a specific IP source are matched as fragmented by PA. As consequence, due to a Zone Protection and Fragmented Traffic p

...