General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Content 596 Update - Seeking more details on customer reported problems

Can anyone provide details on some of the problems that were experienced after applying content update 596?

We spent all night troubleshooting a problem where our PA3020 was impacting TCP\9100 traffic. The problem started soon after the update. We wou

...

Resolved! Help setting up PA200 with a 4g modem running in bridge mode

Hi

Have tested few different modems and i cannot seem to get then to work propely.

heres my setup and i hope someone can point me to the right direction

1.Dovado router with a usb 4g usb dongle ( running in bridge mode, providing a external ip when usi

...

File Blocking Cant recognize .txt files

Hello to all,

I am trying to find a way for Palo Alto to recognize some how *.txt files so I can be alert when it pass my Firewall.

Any ideas how I can make this happen?

I have search on the extension list but the .txt is not included some where.

Tha

...

Resolved! Unable to see traffic in the Monitor tab-->Traffic section under 'Logs'

Hi,

We have setup Palo Alto Firewall version 7.0 virtual appliance. we have configured two networks ehernet1/1 (10.10.2.x/24) and ethernet1/2(10.10.3.x/24). We have created a policy to allow traffic between these two networks and are able to ping acr

...

Panorama 7.1.2 > template validation error -> TEMPLATE1 is missing 'settings'

Even trying to do it via CLI it does the same. Originally it didn't even show that vsys1 was an available vsys after the settings default-vsys command until I tried to enter it once (which it didn't complain about). Compare to running config does not

...

Agg Interface Subinterfaces over multiple vsys

Hi,

I am working on multi-vsys (4) design with PA-7050 chassis. I would like to know if I can use aggregate interface over multiple vsys. I am thinking of using aggregate interface so that i can get link redundancy. The agg interface will have multip

...

VPN users getting "password expires in 0 days" after upgrading to 7.0

Hi all,

Today I upgraded our PA-500 from 6.1.4 to 7.0.0.

After the reboot, when I log in with the GlobalProtect client, I receive the following message in red in the warnings/errors section:

"Password expires in 0 days."

We authenticate our VPN users to

...

Custom System Event ID Severity

I would like to set the severity of the vpn tunnel-status-up event to critical so that it triggers an email without having to get emails for all informational notifications. Does anyone know if this is a possibilty as it currently sits?

Resolved! Aggregate two physical ports and share amongst multiple VSYS?

We have an old fashioned flat network layout. We are looking at a significant network redesign and part of that is doing a proper security architecture and separating our servers from our userbase and separating server tiers (e.g. web, application,

...

Content Update 592 False Positive

I've noticed that since the 592 content update I've been recieving a large amount of Microsoft SMB Client Response Parsing Vulnerability alerts from Threat-ID 35427. I've checked the servers and the workstations and everything is up-to-date or not ru

...

Resolved! PA-3020 L2/VW Config Help

Hello,

I just recently purchased a pair of PA-3020’s and I am having some trouble with Layer 2 / Virtual Wire interfaces. I am trying to create a network with multiple segments for both servers and workstations. I will have several “standard” segment

...

show interface logs status by date

Hello,

How do I verify if an interface status changed by date and time? Example: I would like to know if Ethernet1/10 went down last week or 2 days ago at a 10:00 am.

Thanks for any help.

Resolved! Palo Alto high latency on the external interface

Hi All,

What could be the reason fro high latency on the Palo interface and why do l have the same hop multiple times, in fact, 4 times?

C:\Users\admim>tracert 1x3.2x0.x5.x4

Tracing route to 1x3.2x0.x5.x4 over a maximum of 30 hops

1 1 ms <1 ms <1 ms v

...

Resolved! Anyconnect to Palo VPN

I am beginning a Cisco Anyconnect to GlobalProtect migration. Has anyone tried to connect AnyConnect to Palo. I can't find any docs on it and have been able to find a good link on how it is done.

It would help our migration if we could connect the Ci

...

Resolved! Palo Alto PA-3050 100 % CPU

These were upgraded from 7.0.6 to 7.1.2 on 31 May. Since then we are suffering from the data plane very frequently using 100% CPU.

For example:

admin@PA-3050-5(active)> show running resource-monitor hour

Resource monitoring sampling data (per ho

...

Discussions