General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 1, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! User ID group mapping, not pulling groups

I have a problem, I'm setting the user ID group mapping, I can pull users, but not groups, I see 0 groups, I restarted the service, no luck, I verified all server monitoring is connected, and traffic is going to DC'd, the PAN-OS is 10.1.5, I have a

...

Resolved! GlobalProtect - Cannot connect to local gpd service

Hi there!

I have a little problem with GlobalProtect and I don't know how to solve it..
I use Ubuntu 18.04
Each command to globalprotect (for example globalprotect help OR globalprotect connect) returns the answer:
Cannot connect to local gpd service.

...

Email Notifications

hi,
I would like to forward an email notification for specific alerts, ONLY to the person to whom the incident was assigned to.
I don't see any subtype option to the Distribution List.

Has anyone found a solution to achieve this ? (slack messaging is n

...

Expedition not importing NAT or security policies from PA-3020s running PAN-OS 9.1

I'm working on a project to upgrade 2 x PA-3020s each with their own configuration into an HA pair of PA-1420s and am having trouble with Expedition. I've tried importing the devices using the API key and also by exporting the running-config.xml file

...

Retrieve "User Group" using RADIUS attributes

Hello Team,

I have configured a RADIUS connection with FortiAuthenticator to implement multi-factor authentication (MFA). Within FortiAuthenticator, I created two user groups: an ADMIN group and a USER group. My objective is to set security policie

...

loopback for globalprotect VPN

What is the advantage of using a loopback interface for a global protect VPN?

Resolved! Local IKE interface and Tunnel interface in different virtual routers

Does Palo Alto allow having the Local IKE interface in "default" virtual router and the Tunnel interface in different virtual router when setting up site-to-site ipsec tunnels ?

The use case of this to achieve multitenancy and overcome situations wh

...

BGP session flapping with error code 3 subcode 11

Hi All,

I have an issue with setting up a BGP Establish connection. On my side is a PA firewall connected to the a ISP with BGP session. The first time, the ISP side sent only the default route to PA, and there was no problem in the BGP session. An

...

Resolved! Is it possible to group countries?

I want to be able to use a set of countries for some specific rules. Is there any way to create a group with countries?

Error trying to assing more than 90% to Detailed Firewall Logs at Collector Group in Panorama

Hi all,

We are using a Panorama VM with a local managed collector. When I try to customize how to use the assigned space, Collector Group -> General -> Log Storage and I introduce more than 90% for detailed firewall logs, red square indicates that

...

Unable to reach management service and console

Hi, greeting all

my palo alto appliance(PA-850) used virtual-wire mode already, a few days before, paloalto can passaging traffic by virtual-wire pair, but the management service unreachable. even i tried to PING / HTTPS / SSH / SNMP / Console etc. a

...