General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

AWS Palo Alto and Configuring Interfaces

I'm new to AWS, but not new to Palo Alto. We are at the initial phases of building out our AWS environment. I'm getting familiar with AWS but not an expert by any means. I thought I'd start with a trial version of Palo Alto for AWS. At any rate, I've

...

Azure VPN Tunnel configuration MTU adjustment

we are going to configure route based VPN with Azure , Do we need to adjust MTU on tunnel interface on Palo side.

Any specific recommendation.

Resolved! What the different between 'count' and 'repeat count' in the report?

Hi everyone,

I need to know the diffrent between 'count' and 'repeat count' in the report. I found the description of 'repeat count' in the Admin Guide only, but can't found 'count'.

- Repeat Count (repeatcnt): Number of sessions with same Source IP

...

HA Cluster different transceiver type on each firewall

It is possible to have one firewall to use mutilmode sfp and another using single mode sfp for the same interface?

FW1-ethernet1/13 (1G Single Mode) > Switch A (1G Single Mode)

FW2-ethernet1/13 (1G Mutil Mode) > Switch B (1G Mutil Mode)

Thanks

Resolved! Google disclaimer and SSL Decryption

Hello,

I have enabled SSL decryption on a PA-500 running PanOS 7.0.9 for testing purposes (before enabling in prod environment).

All seems to be working fine, except with the Google Disclaimer that randomly occurs and that you have to agree with in o

...

Resolved! URL filtering response pages

Hello Guys,

Could you advise, please? Few questions regarding response pages when URL filtering is implemented.

Defined action continue for any web category like social-networking. Users receive a response page & click on continue and able to access

...

GlobalProtect 2.3.3 problem SSO with Windows10

Hi

We are trying to test the GlobalProtect client , we have version 2.3.3 but does not make the SSO in a Windows 10 machine with x64 version 1511 i 1607. Do you know if this is a known issue that is solved in a later version ? Or should function?

Th

...

basedb vs clouddb URL filter database?

Can anyone anwser why my LocalDB doesn't have a URL match but the CloudDB does?

admin@IPS01(active)> test url bluebarracuda.com

bluebarracuda.com not-resolved (Base db) expires in 0 seconds
bluebarracuda.com business-and-economy (Cloud db)

thanks!

Resolved! GlobalProtect portal client configuration failed

Hello,

I am facing an issue with Global Protect. I have users coming in from 2 different domains and after an upgrade from PAN OS 7.0.5-h2 to 7.0.9, users from the second domain are no longer able to connect.

The error message is that: You are not aut

...

How to Change the Default Service TCP Port

Greetings,

Is there anyway to change the default TCP port that an interface uses for HTTPS or SSH management service?

For example, I am currently using the external interface to redirect port 443, via Destination NAT, service, and DST port translat

...

Resolved! How to filter Office 365 in source NAT?

Hello,

We have a specific requriement to map Office 365 traffic to a specific source NAT to ensure we don't exceed the port limitation. The only way we can think of doing this is to include all the Office 365 IP address ranges in the destination of th

...