General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Whatsapp traffic not always recognized properly

Hi All, it seems that in the last days the whatsapp application is not always correctly recognized. From logs we can see that some connections are blocked. We don't think is due to the last dynamic updates, because we reverted it to precedent version does not solve the issue. We have look into the community but no one suggestions was found. Ha...

Difference between: Start Time | Generate Time | Receive Time | Elapsed Time

Hi All, I have question for you. We have analyzed our log and seems there is something that is not properly correlated. Here below a little explanation regarding parameters mentioned: ------------------------------------------ Receive TimeTime the log was received at the management planeGenerate TimeTime the log was generated on the dataplaneT...

how to turn off the daylight saving time

how to turn off the daylight saving time in PA 7.0.3 ?

tap zone and ddos profile

Hi, I have created tap zone and created policy under security policies .In my ddos profile there are two policies one for trust zone another one for untrust zone if I create another policy for tapzone , is it a good creating another ddos policies for tap zone if yes how can i do that ? Thanks

Suppress Commit logs-External Syslog

I am looking to supress any commit logs going to an external syslog server. I am currently only forwarding medium/high/critical. Thanks

Minemeld 0.9.7

Hi, whats new with 0.9.7 ? just noticed that Minemeld has been upgraded to 0.9.7 roughly 3 days ago. Thanks

Resolved! another 'free' VPN

I was just able to install 'hexatech' free vpn from the Apple App store and with a couple of clicks COMPLETELY bypassed my Palo Alto firewall! This program uses a variety of random IPs. It seems to like port 9010, though it uses others. Short of enabling decryption on my firewall, what are my options?

Resolved! Zone Protection

HI I have a question related to zone protection. I am having a company doing vulnerability scanning on my system and I want to be able to disable zone protection only for the IP's of the scanner. What would be the best way to acomplish this? Any help much apreciated. At the moment there is one zone protection profile that is applied to my "Exter...

Content 571 Customer Advisory

Application and Threat Content version 571 was removed from the Palo Alto Networks support site at approximately 0230 PM PST on 24-MAR-2016, after discovering an issue with this content update and Panorama stability related to the Correlation Objects feature. In the interim, customers who have installed content version 571 and use Panorama for d...

Resolved! New release of PANOS

Hello Community, Do you know when PA release a new version of PANOS, maybe 7.1 or 8.0 ?

latest stable version of PAN OS

Hi All, I am looking for the latest PAN OS version that is being used( any pointers why it is good would be a plus) , i am looking to update my firewalls and Panorama. also any good links on how to absorb existing running firewalls in the panorama would be helpfull. Regards, ~Harry

I don't see a facility to schedule a reboot.

HiI would really like to be able to schedule a reboot at a future time. We are in the process of migrating sites to Panorama from a a local configuration.The config has to be deployed through the single link into the office. This link is a BGP peer. Unless someone is on site then if we lose the BGP peering the device will be inaccessible. The co...

port 2000 and NMAP

I'm having an issue where any traffic through palo alto using destination port 2000 will create a tcp handshake and no more traffic will pass. I've talked to support and no traffic is being dropped by the firewall. i've added a rule to allow tcp 2000 as a service so it shouldn't be doing anything with the appid and no difference in behavior. A...

Automatic VPN Failover

Dear Friends, IF 1 ISP link goes down of operator END we unable to automatically forward to another ISP link. please suggest how to do this. i am using PAN-3020 with 1 ISP and Operator END cisco with 2 ISP. Regards Satish

GlobalProtect Portal Banner Message

Would anyone have a simple example that would allow me to put a warning banner below the login table on the GP Portal page? I'm no HTML expert and have tried to follow some of the posts and documents here, but am not having any luck. I have made sure to set the custom login page in the portal configuration page, but the text I tried to add doe...