General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

PA allowing IM (viber,line,zalo) | PA policy process

Hi,

target is to allow im apps but modify categires.

I have created a policy allowing IM and modify most categories as block.

Policy sample:

Policy is SRC: 192.168.x.x | DST: any | Srv: any | App: IM (viberbased,im,googlebased,ssl) | Url:BLK_CATEG

BL

...

Resolved! Public email attachment

Is there any way to block users' uploading attachment for public email (gmail, yahoo mail and hotmail) ? I created a security policy for allowing applications (gmail, hotmail, yahoo-mail) and associated with file blocking profile but didn't work. Ple

...

Resolved! Assign a new QOS profile to just one tunnel on a tunnel interface

Hi Guys,

I'm rather new to Palo and this community, so forgive me if I don't do this right.

We need to restrict the Egress Max of just one tunnel (out of 9) on a tunnel interface.

The config looks like this right now:

I would like to change just tunne

...

Resolved! Crossover cables on PA-7050

Hello,

I found that for HA1 when there are directly connected, Palo Alto recoments to have them interconected with crossover cables.

is this the same with PA-7050?

https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/high-availability/config

...

URL Filter vs. Type in firewall?

Does the URL filter at urlfiltering.paloaltonetworks.com have anything to do with how a Palo Alto firewall classifies the 'type' of site?

I noticed that there are some sites that our firewall classifies as 'spyware' that the URL filtering site classif

...

Global protect error certificate

Hi,

We are having problems with globalprotect. We have tried installing several GP client versions 2.3.1,2.3.5 and 3.1.3 but the result is the same.

We cant connect using Windows or MAC, we receive a certificate error.

We read in the KB paloalto that c

...

Resolved! HA pair issue PA-500

Hi Guys,

Interesting one. Devices are in HA pair of the PA-500. Suddenly we are no longer able to access the active device through the

GUl, but able to ping mgmt interface and SSH to it. When SSHing getting the screen below:

A firewall in not produc

...

How to blok vbs file into zip file?

Hello, I am getting lot of files (worms) through smtp as vbs file which are put to zip file. This zip file is not encrypted. How can I block this threat.?

GlobalProtect : Need a VPN that separates users into different VLANs; is this possible w/o Panorama?

I need my client VPN to support different vlans based upon authentication to either Microsoft NPS or LDAP groups.
I want a different vlan/IP assigned to the user depending on which group in Active Directory they are in.

Is this configuration possible w

...

Resolved! Win32.malicious.dhlx

Is anyone seeing this on their palo alot blocking some traffic?

How can I block web access for one mac address on my network?

Hi all,

I have a PA-3050 that I've been asked to configure so that it blocks web access for one of the machines on our network, but I can't seem to find the right place to add the mac address of this machine, and searching has failed me so far. I'd

...

Unable to download updates

I have a PA-200 running 6.1.14.

I am able to generate a list of software updates, global protect clients and the dynamic updates, but when I attempt to download any of the files, I get the following error:

Failed to download due to network failure. P

...

Resolved! Certificate error when accessing Gmail using SSL Decryption

Hi,

I've implemented SSL Decryption in our environment and it worked find for most of the domains but "sometimes" when we access Gmail using Chrome it will give us a certificate error.

We are using internal CA and the Root certificate was distributed

...

Resolved! URL filtering profile - how to set "alert" to all categories?

Hello

I'm looking for solution how to set "alert" for all actions for every categories in URL profile.
I believe that this is possible via CLI and I hope that someone could help me with that 

Regards

Slawek

MineMeld VMWare Desktop RE: Updates for MineMeld and Ubuntu?

Is there a release date for MindMeld on RHEL?

Until then I was wondering how are we to treat the VMWare desktop version? Can we consider it as an appliance and assume that both the OS and Mindmeld will auto-update itself or do we need to assume patch

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource