General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Threat prevention & Wild fire dynamic update issues

Any one having any issue with DNS with regard to a recent threat prevention and wildfire dynamic update?

Unused rules

Is it possible for a rule to show unused and be passing traffic? I disabled an unused rule and it seemed to affect traffic. I usually check it and it now show in the traffice monitor and it highlighted as unused. I also rebooted the firewall about a month ago.

Resolved! Using IPSEC tunnel as redundant link to a destination

Hello PAN Live Community, I'm looking at having a redundant link to a given set of destination (servers) over an IPSEC tunnel when primary WAN link goes down. What is the best way to do this ? PBF ?

Resolved! Sinkhole Clarification

I have VWIRE setup rule is trust to untust (wide open rule to any) I added sinkhole profile to the rule. I also added a deny rule above for my sinkhole ip (53.53.53.53). I have my windows box pointing to .2.2.2 when I do nslookup on suspcisous site I never see it hit the sinkole policy nor does the 53.53.53.53 ip show up in threat or traffi...

Upgrade to 7.1.0

I upgraded our lab palo to 7.1.0 last night. Has anyone else upgraded anything in their enviornment yet? I don't plan on doing anything in our production enviornment until at least 7.1.1 or 7.1.2. Not really having much time yet I don't have much to say other than I'm looking forward greater awareness from things like the SaaS reports as wel...

Resolved! Deployment software with 7.1: Cannot see firewall listed

Hi All, After upgrade to 7.1, I cannot see firewall under: I have this problem only with pan500, with 200 works properly. Is that a bug or license issue? Any kind of suggestion? Best Regards Luca

Resolved! group mapping issue

Hi all,when try to Retrieve group include list getting below error :- Internal error. Please suggest.RegardsSatish

Web Browsing and Associated Traffic Logs

I've never really ran into this issue before and was hoping to get some tips on how you all correlate this type of information. So we have FQDN host blocks for certain Internet based resources. More and more I'm seeing collateral impacts to unintended websites. (Yes I'm fully aware of how services can be tied together either through associat...

PAN-OS 7.1 SaaS Report - Export to PDF PA-500

How can we share the new SaaS Report introduced in PAN OS 7.1 on a PA-500? There is no option to export to a PDF. Generating the report creates a weblink, but viewing the report requires a login. Is printing the HTML page as a flat PDF the only way?

Resolved! Global protect question

I've seen multiple videos on global protect and need clarification. My first question is do you need to configure a static route on virtual router? Second quezon is to you need to configure NAT? Tutorial I've seen sometimes so these configurations some don't.

Clarification of rule processing order?

I had two firewall rules in the following order: Any Internal > Any External > Any Application > Service TCP 80/443 Any Internal > Any External > Application filter "web browsing" > Service "App Default" With a "decrypt" profile on web based email which is allowed by the URL filtering profile on the first rule, but blocke...

Resolved! Device not using the default route for Software downloads

Hi, Our PA firewall Device not using the default route for Software downloads or conytent uploads eventhough no service routes configured . Any help would be greatly appreciated Reagards Lijo

Suspended state. Peer device VM number of cores not matching

During high availability configuration both of devaces going to suspended state with error : Peer device VM number of cores not matching; going to Suspended state. I am trying to configure HA in PA200 VM. what could be the problem?

Global Protect Limitations

Is there a way to stop disabled AD computer accounts from connecting to GP? We have a HIP profile attached to the GP rules which force the user to be compliant (ie. member of domain and have AntiVirus). however, when we disable their computer account, they are still able to connect. We can stop them from connecting by removing their user acco...

Resolved! Issue with CPUID with PA-VM-100 on Vitualbox

Hi Guys!! I have installed a PA-VM -100 on my VirtualBox but the problem i m currently facing is as follows: - The CPUID does not appear on the dashboard (general info) i m only able to retrieve the UUID any idea why ? - Can I disconnect The VM i have already installed and registered without losing my licenses ? because i wanna re-u...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Threat prevention & Wild fire dynamic update issues

Unused rules