General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Captive portal user-id for all services

Hi,

I have set up a captive portal for services http and https. The captive portal works well and I get user-id/IP mapping in the logs. The rules are then applied based on the user group membership (AD). However, this user-id mapping does not work

...

Screen Shot 2016-05-21 at 6.45.36 PM.png

Screen Shot 2016-05-21 at 6.43.42 PM.png

Identify custom application

Hi,

we have created a custom application ports tcp/1524-1541, but our Palo Alto is still identifying this app as ORACLE. Why is not taking our custom app?

Regads,

Terminal Server Agent service account issue.

Configured a new TS on palo alto and installed agent on the server. Already have 2 TS configured on the PA and running fine.This new server has 2 service accounts with both needing internet access. These are adsync and centrify service accounts. I ca

...

Resolved! NSX Tags IP information gets lost between Panorama and 5060's

Hello,

We are sending NSX Tags with IP's to Panorama, in Panorama everything shows up great, then when we go to our Physical 5060's Edge Firewalls we see the Tags but the IP information is missing. This makes it hard to build North/South Rules if i

...

Resolved! Many-to-One Destination NAT

Hi,

We currently have a problem on site where our windows domain name matches the website name so the naked domain DNS configuration contains an A record for a web server and not the domain controllers.

As a short term workaround (because it could ta

...

Url category unknown for dropbox and msn

Hello

I'm using BrightCloud URL Filtering (at the moment I have 4792 version on my device). I'm started testing this functionality (security policy with url filtering in monitor mode).

In Monitor tab in URL filtering section I see:

How it's possib

...

Resolved! Question about HA 2 link

Hi Team,

Good day!

My questions is in regards to the HA 2 link. It is a l2 link. However, we can have an IP address on it.

However, lets say that we have no IP address on dedicated HA 2 link on both sides.

Now, If I have a L2 switch in between How w

...

Resolved! PPS Report

Has anyone built a custom report to get packets per second for a destination?

I see we can get total packets transmitted/received over a given period of time, but nothing for calculating pps right in the report.

Any suggestions?

Thanks!

Resolved! User-ID Agent error

Hi,

I am getting the below error in domain controllers

DCOM was unable to communicate with the computer 10.0.129.3 using any of the configured protocols; requested by PID aec (C:\Program Files (x86)\Palo Alto Networks\User-ID Agent\UaServ

...

Searching a Howto for two ISP Connection and two Lan

Hello,

i seach a HowTo for configuration two different ISP connections and two different LANs. Both should nothing to do with eatch other. They should be seperate. Is there any where a HowTo for this configuration? I only found twi isp connection for

...

Resolved! Pan agent

Hi,

I was using windows 2008 Domain controller and Palo alto ldap profile configured. ,Now changing to 2012
So which version of panagent need to be installed.
Where can i download the panagent ?
Is there something need to be done on paloalto side after

...

No traffic being logged at all

Hello, we've got a bunch of virtual palo alto firewalls running 7.0.1. One set are running fine, largely configured with no issues. The other set are in a different environment, all the infrastructure is the same (same type of hypervisor, same versio

...

management down

Dear engineers.

Here again asking for help and advice.

Implement a PA500 in L3 mode, in which trust in part through mpls 192.168.1.10 and have to get to the adminstracion that has the IP 192.168.1.20, but from another network that is in the M

...

Resolved! Ping outside interface from inside

Can somebody explain how I would be able to ping the IP address on an untrusted interface from inside (trusted). I setup a interface management profile on the interface and I can ping the outside interface IP address from the public internet, but not

...

Resolved! Handling Unknown TCP iSCSI traffic

I have a Dell Equalogic SAN that is replication to an offsite location. The traffic is sent over via a VPN tunnel (Certificate based). This traffic is being reported as unknown tcp. I can verify that the traffic in question is in fact the SAN traffi

...

Discussions

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

Discover LIVEcommunity Through Our New Animated Explainer Video!

Captive portal user-id for all services

Identify custom application

Terminal Server Agent service account issue.