General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! commit confirmed X on PaloAlto firewall ?

Hello All,

I am a newbie to PA firewalls but have some experience with JunOS firewalls. I like the "commit confirmed XX" command on JunOS because it will revert a change after XX minutes if for some reason I get locked out. A good example is when c

...

Resolved! Cannot connect to management server

Dear All:

I had meet this problem for three times ,and It comes again , I can ping

the Management port with a low delay , but can not login through the https

and can login from SSH, but without any cli , I can't typing . and always

"Oct 30 12:21:13 Erro

...

Exclude www.google.* from decryption

Hello,

are you able to exculde https://www.google.com ; https://www.google.de and other domains from SSL decryption?

Or clients complain about the slow loading of the website when they open Google or try to search something.

Currently i add in a white c

...

SysLog setup not working

Hi,

I am using PA-2050, with PAN OS 4.1.3.

From few days I am trying to configure the syslog to be sent to a central logging system. I followed every possible documentation, but I am not getting any syslogs coming to the syslog server. I tried on sys

...

Resolved! Maximum number of FW admin sessions

Hi Community

I was teaching a class and was asked a simple question:

Is there a max number of FW administrators that can be concurrently logged into the FW at the same time?

I have a large customer (a Managed Service Provider) with a large number of FWs

...

Applications not being identified correctly

I am running into a number of situations where the applications are not being identified correctly and thus not working. I can see that the applications is using the correct port, but the PA shows it is "web browsing", unknown, etc. Examples:

KaKao

...

Resolved! Commit failed - failed to send phase 1 to client logrcvr

Hello,

Since this morning I'm not able to commit any change from my panorama to my firewalls

Here is the message error that I receive:

Details:
. Management server failed to send phase 1 to client logrcvr
. Management server failed to send phase 1 abort

...

GlobalProtect reports a "Client Certificate Error" but still connects

Hello-

I'm running a PA-500 on with GlobalProtect for VPN access. Just recently our users started experiencing an issue wherein they try to connect and receive a "Client Certificate Error" error dialog. However, after they click OK to close the dial

...

Resolved! SHOW SHADOW RULES?

Hello,

do you know if it's possible to check shadow rules without do a commit. like a commit check? or show shadow rules?

thks,

Alex

Global Protect 1.2.2-14 winhttpObj, error! ipaddress

Hi,

I keep getting this error when trying to connect with global protect, this pc is on the internal network. I should get the massage 'Connected Internal'...any ideas. I have included the log below and highlighted the line.

(T3776) 04/24/13 09:46:14:8

...

Shutting down/disabling subinterfaces

I am very new to the PANOS world so I will apologize in advance if this is obvious, however my search of documentation and knowledebase did not yield anything. I have been looking for a way to administratively shut down sub interfaces. Is this possib

...

Commit Error "commit operation aborted as all daemons are not available"

What does it mean and how to solve it?

Regards Robert

Resolved! About address object with FQDN and apply it to security policy.

If I have a FQDN "abc.com" that have two DNS records 10.0.0.1 and 10.0.0.2.

Then I create a address object with FQDN type, and the value is "abc.com"

When I use this object into security policy, how does it working? Does it become 10.0.0.1 or 10.0.0.2

...

SYSTEM ALERT : high : all_pktproc_2: exiting because missed too many heartbeats

i recive this error few times a week

subject : SYSTEM ALERT : high : all_pktproc_2: exiting because missed too many heartbeats

domain: 1
receive_time: 2014/11/26 13:18:11
serial: 009401009996
seqno: 43452
actionflags: 0x0
type: SYSTEM
subtype: general

...

Avaya 9611G/4610SW VPN to PA-500

Has anyone had success connecting Avaya IP phones via VPN to PA devices? I am able to complete IKE Phase 1 authentication, but fail Phase 2 due to local/remote proxy IDs not found:

'IKE phase-2 negotiation failed when processing proxy ID. cannot fin

...

Unlock your full community experience!

Resolved! commit confirmed X on PaloAlto firewall ?

Resolved! Cannot connect to management server

Resolved! Maximum number of FW admin sessions

Resolved! Commit failed - failed to send phase 1 to client logrcvr

Resolved! SHOW SHADOW RULES?

Resolved! About address object with FQDN and apply it to security policy.