General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Palo VM not redistributing routes

I've attached a screenshot of the portion of the network I'm working on. Our edge routers connect to ISP, ISP advertises a default route to our Cisco ASR. On the ASR I have BGP peering with the ISP and OSPF for internal routing. I have default-inf

...

Is 29 februari a myth?

I wanted to do an update to our firewall today and to my surprise i recieved the following error:

ValueError: day is out of range for month
Failed to load into software manager. Please retry.
Post processing failed. Please retry.

Apparently there i

...

Resolved! Improvement Request: DaGPusher

Hi Luigi,

Is there any plans to customize the tag criteria sent through DaGPusher? If you have two DagPusher from two different miners, it is complex to figure out which one is coming from one DaGPusher and which one is coming from another.

Thank

...

Resolved! BUG : DAGPusher Output Node UI?

Hi Luigi,

With MineMeld 0.9.3 running on VMware Fusion, DAGPusher Output Node Handled devices list does not appear (see attached screenshots).

Tested with Safari 9.0.3 (11601.4.4) and 48.0.2564.116

Thanks

Bertrand

Resolved! DHCP Option 66

Hi All,

I want to configure DHCP options 66 on Palo Alto firewalls with PAN-os version 6.1.

It seems that before 6.1 version is it possible but now is not included.

Is there any workaround in order to set this one? For example is it possible via CL

...

About url-block-cache

Hello,

I have some questions about url-block-cache.

I use continue action on url-filtering.

URL Contiunue Time is set 12 hours.

1.

HA is Active-Active on L3.

It seems to no share url-block-cache between peers.

Each results is different from "show

...

Can you have an Inter-VSYS shared gateway on a VLAN or subinterface?

I see you can have an interface assigned as a shared gateway for inter-vsys traffic but can you do that at a subinterface or vlan level?

Dana

Resolved! Virtual System Migration and clustering

I cam across a scenario where we need to migrate a virtual system from a PA device to another . devices are the same model . Is there any suggestions ? what is the best approach to this ?

Also , if a PA device is running virtual systems how we can add

...

Resolved! Issue with my Palo Alto Lab

Hello folks

I have a strange issue in my lab , here is the scenario :

VM-100 on ESXi
PAN OS 7.0.5
Inside interface connected to internal zone (10.0.1.0/24 network)
outside interface connected to my home firewall ( 192.168.1.0/24 network)

Interfaces have

...

Resolved! How to tell which Objects & Rules are being used.

I want to find a way to tell which address and services objects are not applied to a NAT or security rule and which NAT and security rules are not getting used?

Any Ideas on how to get this information?

Thanks

Bane

Wildfire reports association to wildfire-virus

For every wildfire-virus signature tripped in Threat logs should I expect to recieve a corresponding wildfire report in the Wildfire Submissions too?

Could someone answer or point me to documentation please.

Cant able to access to device after up-gradation reboot from 6.1.4 to 6.1.10

Hi,

I'm not able to access to firewall once after upgrade FW from os version 6.1.4 to 6.1.10, any known issues or any possiabliity that FW gone to maintaince mode else reboot loop mode??

Please assist.

Regards,

Kotresha

Web page issues between F5 and PA

After migrating from an ASA to PA3020, users reported that web pages were not fully loading. The issue was seen on the ASA but rarely. The PA3020 has been showing this issue more often than not resulting in a work around being done on the webpage.

...

Really good tool!

Hi,

This is an really good tool for managing dynamic lists.
So far I have tested a basic setup and I have a few comments/suggestions.

* How do I change the ssl certificate for MineMeld.

* Will you also implement domain blocklists soons (currently runnin

...

Resolved! .yml file: PA device password in clear text

Hi Luigi,

.yml file for DagPush node in /opt/minemeld/local/config shows password of the device in clear text. It should be at least hashed.

Thanks

Regards,

Bertrand

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Palo VM not redistributing routes