General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! TRAPS with Firewall

Hi,

My company is thinking to deploy TRAPS and I was going through deployment documents but I am not sure if the TRAPS will some how integrate with PA Firewalls or there is no Integration between both and if we can use Panorama to collect TRAP

...

Resolved! packet /s in one interface

Hello,

Do you know what is the command to see the packet by seconds is going through in one interface? or how many packets allow at the same time one interface ?

Best Regards

Andres Padilla

Resolved! No SSL Decrypt Skype for Business traffic

How can you disable SSL decrypt on Skype for Business traffic or all audio/video conferencing?

Resolved! API command to send to f/w to upgrade IOS

Hi is there a API command to send to f/w to upgrade IOS

Have to reboot globalprotect client to connect.

WE have a problem with globalprotect- The users sometimes need to disable the globalprotect client in order to connect to another VPN. Later when the globalprotect client is re-enabled, any attempt to authenticate immediately returns a username/pas

...

Resolved! Best practice for assigning IP addresses to HA1 and HA2 on directly connected PA3050's

I am setting up HA on two PA3050's. They are racked one above the other and will be directly connected HA1 to HA1 as well as HA2 to HA2. However, the management ports are connected into a pair of Cisco 3750's stacked.

My question is, what is the be

...

Resolved! Migration tol vs No migration tool

Other than migration tool is that the only way to do a multi rule edit? For example if I wanted to apply profile to 5 rules at once w/o using migration tool

Management Profile and Security rules

Hi There,

I got a question, on non-mgmt interface firewall, I configured a management profile to access SSH and HTTPS do I need to allow the security policy explictly to access firewall ?

Resolved! Check software update failed

Hi all!

I have this problem: when i check new software updates, clicking "check now" button, this error appears: "Failed to check upgrade info due to generic communication error. Please check network connectivity and try again."

Doing a traceroute we

...

Resolved! How To Best Control Access to SFTP Server in DMZ

I have an interesting problem. There is a requirement for moblie devices (Throughout the Us and Canda) to access an SFTP Server from the Internet and upload files to it. No other devices are allowed access, from the Internet, to the SFTP server. The

...

vsys CPU utilization

Just wondering if the more vsys you add, how much more CPU utilization or resource utilization will be used? Does the more you add degrade the system at all? I'm looking at a 5060 or a 5560 with at least 7.0 OS.

Is there any documentation that stat

...

Anyway to block Webex plugin?

After hearing the news that the Webex extension in Chrome has a serious vulnerability is it possible to block this at the Palo Alto?

http://arstechnica.com/security/2017/01/ciscos-webex-chrome-plugin-opens-20-million-users-to-drive-by-attacks/?commen

...

Use wildcard in user/group based policy

Hi,
We have a Splunk Server that sends to your id-agent (on a windows server) the information of guest users.

Now on PA We can se user@acme.com in the logs, is possbile for us create a rule for all users from acme, without define each user?

So a group

...

Resolved! ssh problem on mac os x

Hey guys,

I have such a weird problem.

A user has to connect to a samba server. He does it on his mac with cyberduck, Port 999 and ssh.

in the monitor, the application is "incomplete", the action is "allow", and session end reason is "aged-out".

Curr

...

Netflow bandwidth usage and link-aggregation

We've added a netflow server profile to 4 sub-interfaces on ae1 that connects ISP. The netflow is then reported to Solarwinds where we have poll and collect netflow from these sub-interfaces. But we are also seeing notifications i Solarwinds that all

...

Discussions