General Topics

🚀 Join us at Palo Alto Networks Headquarters for Ignite - November 14, 2024 🚀

Enterprises are embracing AI to revolutionize their operations, but with innovation comes new cybersecurity challenges. That’s why you can’t miss Ignite on Tour!

This event is your gateway to exploring how AI is transforming cyber defenses. Join us

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Issue with CPUID with PA-VM-100 on Vitualbox

Hi Guys!!

I have installed a PA-VM -100 on my VirtualBox but the problem i m currently facing is as follows:

- The CPUID does not appear on the dashboard (general info) i m only able to retrieve the UUID any idea why ?

- Can I disconnect The

...

data filter on comment

Hi community ,

is there any way to filter comment contained some bad words (f**ck , so on) that is written by our employers to add any website(often use http) ?

Resolved! Policy Configuration App-ID

Dear colleagues.
I do not have much experience in PA and I would like to help me with a configuration that is very basic for some.
I wish to make is a policy in which App where certain app block p2p (torrent, Tor, ultrasurf) and allow other application

...

Resolved! ACE Labs? Cannot access "Firewall Configuration Essentials 101"

Hi All,

Have a question on the ACE 101 course labs that I was hoping someone could answer. I have a partner account and was able to access and complete the 101 coursework just fine. However, when trying to access the Labs, I am able to register, bu

...

Best practiecs

Is anyone using these recommended settings?

set deviceconfig setting tcp urgent-data clear

set deviceconfig setting tcp drop-zero-flag yes

set deviceconfig setting application bypass-exceed-queue no

set deviceconfig setting tcp bypass-exceed-oo-que

...

PANOS 7.0 SNMP logical interface counters

I tried the feature and the RX and TX counters are a way off from the physical interface (Tested on 5060 using e1/21 and e1/22 for AE1). I opened a case with TAC, and this is the explaination from TAC,

For hardware interfaces (ethernet1/21 and e

...

When will a new GlobalProtectClient GUI/UI be written?

We've been holding off replacing our Cisco Anyconnect clients as the interface of GlobalProtect is a big downgrade for us.

Any idea when/if there will be improvements made to the GP UI?

At the moment it looks like it was developed by engineers with n

...

Resolved! cli: traceroute host, ping host use connected interface

Is it possible to have traceroute host and ping host default to using the interface the cli was connected to?

We have the Management Interface of our PA 500 set to an internal address, like 192.168.129.11. We can connect to it from our mpls networ

...

Crazy policies needed for BGP and VPN

Hi,

first read this article:

https://live.paloaltonetworks.com/t5/Learning-Articles/Any-Any-Deny-Security-Rule-Changes-Default-Be...

then

I have this exactly behavor but I don't have wrote any/any/deny rules!

In my enviroment both intrazone-defa

...

Vulnerability exemption

Hi

what is actually
simple-client-critical
simple-client-medium

I

I want to change the default action from alert to block .
the rule is under simple-client-medium , but the search result shows it is under
simple-client-high

Thanks