General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Is 29 februari a myth?

I wanted to do an update to our firewall today and to my surprise i recieved the following error:

ValueError: day is out of range for month
Failed to load into software manager. Please retry.
Post processing failed. Please retry.

Apparently there i

...

Resolved! Improvement Request: DaGPusher

Hi Luigi,

Is there any plans to customize the tag criteria sent through DaGPusher? If you have two DagPusher from two different miners, it is complex to figure out which one is coming from one DaGPusher and which one is coming from another.

Thank

...

Resolved! BUG : DAGPusher Output Node UI?

Hi Luigi,

With MineMeld 0.9.3 running on VMware Fusion, DAGPusher Output Node Handled devices list does not appear (see attached screenshots).

Tested with Safari 9.0.3 (11601.4.4) and 48.0.2564.116

Thanks

Bertrand

Resolved! DHCP Option 66

Hi All,

I want to configure DHCP options 66 on Palo Alto firewalls with PAN-os version 6.1.

It seems that before 6.1 version is it possible but now is not included.

Is there any workaround in order to set this one? For example is it possible via CL

...

About url-block-cache

Hello,

I have some questions about url-block-cache.

I use continue action on url-filtering.

URL Contiunue Time is set 12 hours.

1.

HA is Active-Active on L3.

It seems to no share url-block-cache between peers.

Each results is different from "show

...

Can you have an Inter-VSYS shared gateway on a VLAN or subinterface?

I see you can have an interface assigned as a shared gateway for inter-vsys traffic but can you do that at a subinterface or vlan level?

Dana

Resolved! Virtual System Migration and clustering

I cam across a scenario where we need to migrate a virtual system from a PA device to another . devices are the same model . Is there any suggestions ? what is the best approach to this ?

Also , if a PA device is running virtual systems how we can add

...

Resolved! Issue with my Palo Alto Lab

Hello folks

I have a strange issue in my lab , here is the scenario :

VM-100 on ESXi
PAN OS 7.0.5
Inside interface connected to internal zone (10.0.1.0/24 network)
outside interface connected to my home firewall ( 192.168.1.0/24 network)

Interfaces have

...

Resolved! How to tell which Objects & Rules are being used.

I want to find a way to tell which address and services objects are not applied to a NAT or security rule and which NAT and security rules are not getting used?

Any Ideas on how to get this information?

Thanks

Bane

Wildfire reports association to wildfire-virus

For every wildfire-virus signature tripped in Threat logs should I expect to recieve a corresponding wildfire report in the Wildfire Submissions too?

Could someone answer or point me to documentation please.

Cant able to access to device after up-gradation reboot from 6.1.4 to 6.1.10

Hi,

I'm not able to access to firewall once after upgrade FW from os version 6.1.4 to 6.1.10, any known issues or any possiabliity that FW gone to maintaince mode else reboot loop mode??

Please assist.

Regards,

Kotresha

Web page issues between F5 and PA

After migrating from an ASA to PA3020, users reported that web pages were not fully loading. The issue was seen on the ASA but rarely. The PA3020 has been showing this issue more often than not resulting in a work around being done on the webpage.

...

Really good tool!

Hi,

This is an really good tool for managing dynamic lists.
So far I have tested a basic setup and I have a few comments/suggestions.

* How do I change the ssl certificate for MineMeld.

* Will you also implement domain blocklists soons (currently runnin

...

Resolved! .yml file: PA device password in clear text

Hi Luigi,

.yml file for DagPush node in /opt/minemeld/local/config shows password of the device in clear text. It should be at least hashed.

Thanks

Regards,

Bertrand

Resolved! VMware ESXi 6.0 and PA VMs

Is VMware ESXi with vSphere 6.0 supported?

The technical documentation for the 6.1 virtual appliances states: "VMware ESXi with vSphere 5.0, 5.1, and 5.5 for VM-Series running PAN-OS 6.1."

And the 7.0 documentation states: "VMware ESXi with vSphere 5.1

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource