General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Error with PDF Reports

when i do a test email for the email profile it successfully delivers the email. however in my system logs I get this error.

"failed to email pdf reports to #####@#####.com for email profile #####"

any ideas?

Resolved! User based ssl decryption

Hi,

I try to test ssl forward proxy decryption. It works fine if I use IP address as a source but if I use Users(domain) as a source it doesn't work. I can't use IP's for testing because our IP's floating. What I need to check in configuration?

Toni

Resolved! GlobalProtect 3.0.2 setting VPN DNS on WiFi adapter

Hi,

I'm having a single client, running Windows 10 Pro, that we're having issues with.

When the user connects to their network at home, they are unable to connect to VPN, and it seems like the issues is caused by GlobalProtect setting the WiFi adapter

...

Resolved! QOS & Aggregate Interfaces

Hello,

In our QOS Aggregate Eth. Interfaces we cannot assign an egress value greater than 1000.

(LACP Bundle is 2 x 1Gbit on eth4 + eth5)

Why ?
Do we throttle down throughput to 1 GBit/sec. in the Aggregate ?
Shall we leave egress value in profile and Int

...

Resolved! Is there any restriction for application to add in Policy based forwarding

Is there any specific reason that all application is not avaialbe to add in policy based forwarding.

For ex: I am trying to add "panorama" in policy based forwarding, it is not there.

I have to addd port 3978 instead of application. Is there any reason

...

Resolved! Globalprotect client authenticate with a certificate not working anymore

Since we use our Palo Alto firewall, our users there Global Protect Client authenticate with the firewall through a certificate that is deployed thorugh Active Directory. Our Global Protect Client version is 3.0.2.

Since we updated our Pan-Os version

...

Slow download over decrypted TLS sessions?

I've noticed that downloads that occur over decrypted TLS sessions are incredibly slow since upgrading my PA-3050s to PAN-OS 6.1.x (now on version 6.1.12). Sometimes they don't even complete at all, either failing or just sitting forever. For examp

...

Resolved! RSH session issue passing through the Palo Alto

Hi Guys,

Interesting one.

1x2.1x4.1x4.1x5 makes an initial connection using RSH the 192.168.0.20 then creates a separate RSH session back to the originating server but this always fails as the Palo seems to ignore the rule and NAT that is in place f

...

Brightcloud connection error

I have a PA-500 that is receiving the error of:

opaque: Failed to connect to Brightcloud update server service.brightcloud.com, initiated by 192.168.75.30

eventid: connection-failure

There seems to be no connectivity issues to URLs for the users. Just

...

Automate GlobalProtect VPN connection

Hi All,

We are trying to automate connections using the GlobalProtect VPN with a batch script. There's a way to accomplish it?

I've tried to use the PanGPA.exe in "C:\Program Files\Palo Alto Networks\GlobalProtect\" without success.

Any kind of hel

...

DNS-proxy BUG 7.1.2 using capital letters

Just wanted to put it out there.

I upgraded to 7.1.2 yesterday and a lot of my static dns entries stopped working. after some playing around i figered out that it was because i was using capital letters in my entries. I changed them to lowercase and e

...

Whats PAN's future for TLS decrypt with many sites now moving to Diffie-Hellman based ciphers ONLY?

Does PAN have any plan for better managing the current state of TLS decryption now that Diffie-Hellman based ciphers are becoming the default standard?

PAN currently only supports the below ciphers, and when presented with a website that ONLY support

...

Application override with custom application and threat detection

I want to build a custom application with application override and still be able to scan for threats.
On the website of Palo Alto, there is this text:

If you define an application override, the firewall stops processing at Layer-4. The custom applic

...

Resolved! Block http traffic to numeric URLs

Hi,

I was ordered to block all http and hhtps traffic to addresses without a dns name. In other words user have to put in a network name in the browser and are not allowed to type an IP address in the address field.

As the thinking behind is bloc

...

PA identifying traffic from AKAMAI as BruteForce.

Hi guys,

Context: For the past 24 hours we've had constant reports of a Brute force attack on our servers originating from the Akamai CDN's.

I'm unsure whether this is simply a false positive, or if there something to actually worry about.

I've

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

Error with PDF Reports

Resolved! User based ssl decryption

Resolved! GlobalProtect 3.0.2 setting VPN DNS on WiFi adapter

Resolved! QOS & Aggregate Interfaces

Resolved! Is there any restriction for application to add in Policy based forwarding

Resolved! Globalprotect client authenticate with a certificate not working anymore

Slow download over decrypted TLS sessions?

Resolved! RSH session issue passing through the Palo Alto

Brightcloud connection error

Automate GlobalProtect VPN connection

DNS-proxy BUG 7.1.2 using capital letters

Whats PAN's future for TLS decrypt with many sites now moving to Diffie-Hellman based ciphers ONLY?

Application override with custom application and threat detection

Resolved! Block http traffic to numeric URLs

PA identifying traffic from AKAMAI as BruteForce.

Upgrade from version 10.2.7-h8 to 10.2.11-h2

IPSec setup with certificate

UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

Site flagged as GRAYWARE Please Help!!

HA State is "not sycned" even though Sync Task is completed on Peer (Passive) Gerät)

Re: User ID agent not starting.

🚀 Join us at Palo Alto Networks Headquarters for Ignite - November 14, 2024 🚀

Re: Sofware Upgrade broken? "An active license is required for this feature"

Re: Cannot see Dynamic IP lists

Recommended PAN-OS version

Unlock your full community experience!

Resolved! User based ssl decryption

Resolved! GlobalProtect 3.0.2 setting VPN DNS on WiFi adapter

Resolved! QOS & Aggregate Interfaces

Resolved! Is there any restriction for application to add in Policy based forwarding

Resolved! Globalprotect client authenticate with a certificate not working anymore

Resolved! RSH session issue passing through the Palo Alto

Resolved! Block http traffic to numeric URLs