General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

x-forwarded-for IP not appear in traffic log

Hello everyone,

I have enable x-forwarded-for in PA.

When I look at the pcap from PA, I see the ip address

but from monitor log traffic, collum x-forwarded-for ip is empty

Please your help.

Thank you

pa-410 lost monitor log function and ACC function

I have a PA410. After upgrading the software recently, I found that the original monitoring log has reduced a lot of functions, and even the ACC function has been lost.

I checked the website information and found that this function was cancelled after

...

Issue GP Linux - URL Browsers

Hi,

I am experimenting a very strange behaviour with Global Protect when connecting to my work from my home. I am able to connect to the VPN of my work and even doing ssh to the server in the private network, but when I try to surf the web, the bro

...

Resolved! Telemetry error - CDL Receiver Key Empty

Hi All,

We have a client who all of a sudden started to receive the following telemetry error - 'CDL Receiver Key Empty' on PA-440. No changes have been made. Currently running PAN OS 10.1.2. They are not using CDL and are just sending Telemetry dat

...

Resolved! UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

I have a fairly simple network setup in my LAB

Management Interface 192.168.1.1 /24

LAN Interface 192.168.100.1/24

DESKTOP IP 192.168.100.100

I have allowed all the Internal Subnet on the Management interface which is 192.168.100.0 /24 in permitted l

...

Resolved! Failover IPSEC tunnels with tunnel monitor keeps both tunnels active

We have just configured 2 IPSEC tunnels with a remote palo. Both sides have 2 IPSEC tunnels with tunnel monitor and DPD configured. For some odd reason, the when the primary tunnel is active and has active routes going to it, the secondary tunnel s

...

Resolved! NTP not working once authentication is enabled

Hi Guys,

NTP was working well. But when authentication was enabled below msg is seen on the Firewall (NTP Stopped working)

NTP server is a local one using IP address (not FQDN)

PAN-OS Version 10.1.5-h1

All the other devices are syncing except for th

...

PAN OS - 11.1.4-h1

11.1.4-h1 PAN OS is recommended version for PA-450 box ? what is the release date of it ?

Resolved! TYPICAL NAT QUESTIONS

Hello,

I have a web server in DMZ with private ip address 192.168.10.100/24 and I would like all the traffic from outside should come to this server. My public ip is 1.1.1.2/255.255.255.248 which will bind to 192.168.10.100

To perfom this I can creat

...

Resolved! GlobalProtect expand IP Pool

We have an existing GP setup and it's working, but the IP Pool is set to a range of IPs 192.168.10.10-192.168.10.100 instead of a subnet 192.168.10.0/24.

I want to either expand the range or change it to a subnet.

I tested this by expanding the r

...

SAML Immediately logs me off???

Hello -

I've set up SAML and by all accounts it looks like everything is working fine. In the Monitor > System logs I see four different events: saml-client-redirect, saml-idp-activity, saml-signature-validated and finally auth-success.

The issue is

...

Updates required for NGFW customers of User-ID

Hi Team,

Can someone please confirm if the incoming expiration of the certificate used by NGFW, and user-ID, going to impact Cloud Native solutions as PrismaCloud and Twistlock defenders?

I'm not sure if anything needs to be performed before the

...

tacacs+ authentication

Hi All,

i need to undersatnd if tacacs+ is cisco properiety , so how come juniper and paloalto use it ?

second question here , tacacs+ used mainly for cisco command authorization , so what is the need for that inside paloalto ?

Resolved! Maximum Pan-os version recommended for PA-820

Please advise the maximum PAN-OS version for a PA-820.

We would like to ensure optimal security without sacrificing performance.

Recommended PAN-OS version to run is 11.1.4-h1

Resolved! User-ID agent upgrade path

Greetings,

I am running NGFW x 35 (10.2.10-h3) and User-ID Agent 10.2.2-111, which I believe needs to be upgraded to avoid the Nov-18 issue.

My question is, does the User-ID Agent need to remain in the same stream as NGFW (ie. 10.2.x) or can it g

...

Discussions