General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

Resolved! Routing Table BGP

I presume that there is not way if I have a box that only has a max acceptance route of 2500 only way to adjust this value is to repalce box? No software updates can acheive this ?

Missing add button config tab

Hi,

I don't see any add button anymore on the config tab.

Resolved! Feature Request

Am I the only one that is wondering why a "Feature Request" should be submitted to a reseller? Why not have a central site that is searchable so that you are not duplicating something already submitted or a sticky page that has feature requests that

...

Security Policy question setting application and services

Hello, in the security policy that is setup. Is it best to set the application and services the same?

So this will help keep that security policy safe from outside device try to see what other application can be use on that security policy.

example wo

...

Resolved! Set Interface to default settings

Hi everybody

I got a pair of PA-3020. Some time ago I configured several interfaces to layer2 type and now they are not in use anymore. Is it possible to set them to default config, I mean with NO inteface type? I

As you can see in the photo, etherne

...

Resolved! Issues installing Minemeld

Team,

I have run into an issue installing Minemeld following the documented process for install on Ubuntu Server 14.04 LTS. Below is the output from apt update. Seems that there is a GPG key issue and I have made sure that the fingerprint characte

...

Upgrade PAN-OS 7.0.9 to 7.1.6

Hi,

We are planning to upgrade the PAN-OS software from 7.0.9 to 7.1.6. I read on some articles that the base image does not need to be installed.

I have two options as follows:

Option 1:

7.1.0 (Download, NO install).
7.1.6 (Download and install).

Opti

...

Aggregated port over Vsys (AE1 over...)

Hi,

I'm thinking about put som vlans inside and Aggregate, and distribitute over various Vsys, as far I know, reading here in the community, it's possible use subAEinterfaces on different VSYS.

Then, the question is, on wich VSYS must be the physica

...

Flood protection

What is the best way to set up flood protection, separate profile one for ICMP, one for SYN cookies etc or put it all in one policie? What is the best way to determine what set your alarm rates, block rate etc? How successful is it, does good traffic

...

Ip missing in output

Hi,

I have default profile.

I added a node "RW_IPBL NODE" that has 11464 ips

But after processing I only see 900. Generated I think by other nodes.

What can be wrong?

Thank you

MineMeld and dinamic list in Pa500

Hi,

We have a Pa500. It read that only permit 10 list with a max 5000 ip's.it is right?

I have deployed a MineMeld with default configuration. I have a list configured in Pa-500 https://ip-minemeld/feeds/inboundfeedhc.

What does the pa-500 to

...

License for SSL VPN (GP Client)

Hey guys,

We have a PA 200 as lab firewall and I want to setup SSL vpn.

Can you tell me which licenses I need for it?

The GP window (Device -> GP Client) is completely empty. When I check for new versions, it says "The device does not have support".

...

group mapping lost suddenly

Seems like a bug any one faced in 7.0.9. We have several firewall and 2 time it happened group mapping lost suddenly and we have manaually refresh to get it it back.

Resolved! Processor Descriptions

I know I've seen an article/documentation on this somewhere, but I am struggling to find it.

When running a show system environmentals, and more specifically the "Thermal" area for the processors, does anyone know what functions are being handled by

...

change webcertificate

Hi,

Testing with Rome release I notice we need to have trusted CA on the Minemeld webserver. You can't use the Minemeld default certificate to import on the PA firewall.

So I had to manually change certificate in the NGINX.

Maybe this could be inc

...

Discussions

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!