General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

PA-3020 log retention period

Hi Experts,

I am quite new to Palo Alto and I have some queries regarding the URL filter log retention, before we can generate user activty reports for browsed URLs for more than two weeks old, but now we can only see URL filter logs up to no more th

...

How to convert security policies into an excel file in Palo Alto Firewall

I am looking for a way to convert exsisitng security policies in PA firewall in PAN-OS version 7.0.x to an excel or CSV file. I found no valid way or documents. Can any body help me.

Cheers

Yasir

Resolved! Searching Script For Panorama Traffic Logs

I have a need to search my Panorama traffic logs looking for 1000's of source IPs, engress on the outside zone. I would like to write a bash script to actually read through the logs for the IP's. Manually searchinf for this large amount of IPs is not

...

Resolved! Panorama Issue with Administrator access

Hi everyone

I have a Panorama 100 (version 7.0.7), the device is configurated with 2 Local administrator for managment,

but when I created differents new users (test,test2) with same rol and commit the config, I cant access through web or ssh using

...

Resolved! Palo Alto Firewall as an NTP Server

Can a firewall with software version 7.10 or later be used as an NTP server?

Thank you.

Jeff

How does HA2 work ?

Hi everyone,

That is the considering architecture :

Two Datacenters, Two 3050 Palo Alto appliances.

There is one switch on each Datacenter and the switchs are connected with a layer 2 optical fiber link

Each appliance is located on each Datacenter and c

...

Upgrade PA from 6.1.4 to 7.1.5

Hi All,

Can i directly upgrade software from 6.1.4 to 7.1.5?

Resolved! OID for network topology

Hi,

I got one request where the client is asking about the OID for L2/L3 topology and arp cache table.

I checked the following article but it doesn't have any reference for the above.

https://live.paloaltonetworks.com/t5/Management-Articles/SNMP-for-

...

Resolved! Topology of Panorama

Hello,

What type of topology does Panorama use? For e.g. if we have 4 FWs A,B,C,D then will each be connected separately to Panorama? If so, will there be overhead issue? What if B,C & D are connected to A and A is connected to Panorama? How to acces

...

WildFire unable to block the file

Dear Experts,

A file gets downloaded through PA, in WildFire submission logs I can see the action as "forward" as expected. After that action is "wildfire-upload-skip" that means the file has been seen by wildfire before and the verdict is "Malicius"

...

Google Dynamic search unavailable after implementing "Safe Search + SSL Decryption"

I recently implemented Google Safe Search + SSL Decryption for a small test group and it all works as expected/described.

Thanks for the excellent documentation on this!

The only odd thing I noticed is that I seem to have lost the Google Dynamic Searc

...

2016-09-23 11_09_02-Zoekinstellingen - Internet Explorer.png

Resolved! site-to-site VPN redundancy with one ISP at the branch office and two ISPs at the home office?

Hi there!

We have had a site-to-site VPN setup between our home office and branch office for about six months. We have a pair of PA-500 at the branch, and a pair of PA-3020 at the home office. The home office has two ISPs setup in a dual-vr failover

...

vulnerability id 31327

Hello,

Start 10/13, I have been getting medium threat alert for vulnerability id 31327 (Attempted Antivirus Detection Bypass via Malformed ZIP Archive). I beleve it is my iOS devices connect to apple store to download app updates. Anyone else sees

...

Screen Shot 2016-10-22 at 7.13.09 AM.png

SNMP and ARP

Is there a way to pull the ARP table from a firewall using SNMP?

We have tools that utilize the ipNetToMediaPhysAddress (OID repository - {iso(1) identified-organization(3) dod(6) internet(1) mgmt(2) mib-2(1) ip(4) ipNetToMediaTable(22) ipNe…) on othe

...

Resolved! New DNS configuration issue

Hi All,

I have coinfigured a new DNS server on Palo Alto device. However, it is still sending queries to the old DNS servers.

Please help.

Regards,

Raghav

Discussions