General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

PAN-OS Expiration Versions

HI,

Currently on version Current version: 9.1.12-h3 for both our firewalls.

My team leader has downloaded version: 9.1.12-h6 for me to finish and upgrade to as she is now on leave.

Just wondering if the version she has downloaded will be adequate

...

What is the cost for the Support program choices between Premium, Platinum and Focused Services?

I have the standard support and looking to change the support.

Thanks,

Resolved! Recover password without doing Factory Reset

Is there a way to do a password recovery or reset without doing a Factory Reset?

Traffic Problem when going from Layer 3 to Layer 2 configuration in a VWire PA Deployment

Hi,

So our current use case is like we have GW Router -> Switch -> PA in Vwire -> Switch. The downstream switch is connect via native VLAN 1 to PA while upstream switch interface is in Vlan 10 in a L3 deployment. Now we want to move this deployment

...

"Server error : Timed out while getting config lock. Please try again."

Hi Team,

We getting the error "Server error : Timed out while getting config lock. Please try again.".

We tried to restart the mgmt server but the issue still same. When we rebooted the firewall issue is resolved.

Pan os 9.0.12

PA-3050.

Anyone help me

...

Resolved! dhcp restart?

I am using the dhcpd on the Palo Alto firewall, and have seen some strange relase patterns, is there away to do a shutdown/start or a restart on the daemon?

Palo 1410 - Inability to ping my through ISP

New to Palo Alto. Have installed a new PA 1410. This is directly attached to the Ciena 3924 device provided by the ISP. Connecting a laptop to that device allows full internet access. The external interface to access the internet on the Palo Alto is

...

DNS server can't access to management interface

Hello,

I don't know if this is a normal behavior or not. We have 3 DNS servers.
DNS_A
DNS_B
DNS_C

We are not able to ping or ssh/http to the management interface from the DNS server, if this DNS server is configured as DNS server in the firewall.

When we

...

Global Find search results show spinning wheel, unable to expand results after PAN-OS upgrade to 9.1.16

Does anyone know if there is a CLI command to restart, or way to rebuild, the search database? After upgrading to 9.1.16 I am unable to expand search result details for attached objects/policies, instead it hangs with a spinning wheel. Additionally,

...

Resolved! Support for Open LDAP

Hi All,

Does Palo Alto supports LDAP running in Linux operating systems? If yes, does the configuration is the same when using active directory?

Thanks,

Rex

Certification expiratio - Redistribution question.

Hi,

We are not using redistribution in our FWs. We just have our PAs connected to a UIAgent. So i understand that we dont need to upgrade FWs, just install app&threats version.

The point here, that PA releases a python script and its marking like r

...

Asking about poor response time resulted in the sales team using personal attacks.

Several times now Palo Alto sales representatives have accused me of the “fact” of my unresponsiveness/unavailability being the reason for a case taking so long (it was never resolved). This concerns me greatly as I have always tried to respond in a

...

Resolved! SNAT for multi WAN IP

Hi All,

I have ISP provide 4 public IPs can be use.

But I can use 1 public ip to outbound traffic only., if i create another SNAT to 2nd public IP, it can't go out to internet.

e.g. Interface IP: 20.1.20.20/29

Not work NAT configuration

NAT:

...

Panorama Policy Push Failed

Hi Team,

I am unable to push policy from Panorama to one of the firewalls. Getting the Commit Failed due to below reason.

. ssl vpn cert file (CERT_GW) processing failed
. (Module: rasmgr)
. global-protect-gateway tunnel interface (tunnel.1) in vsys

...

Upgrade Path from v10.1.10-h2 to 10.2.7

Hello Fellows,

What can be the best path to upgrade from v10.1.10-h2 to 10.2.7?

Can we do it directly ?

We have Stand alone 220s and 2 HA pairs of 5220.

Thank you

Regards

Hina