General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

DNS Sinkhole not triggering for known malicious domains

Hello, has anyone had any problems with DNS sinkhole not triggering on PAN-OS 6.1.4 ? I have created a security policy for DNS traffic between a LAN side DNS server and a WAN side upstream DNS server, the Palo sits at the WAN edge between the two DNS servers. Attached to this security policy is an Anti-spyware security policy with DNS action...

PAN-OS 6.x to 7.x Issues

We currently have Panorama with a total of 2 HA Pairs (PA3050's and PA3020's) deployed. We are planning to use Panorama to upgrade from our current 6.x software to 7.x. Here are some gental questions that perhaps someone who has done this before can answer: What would be a good estimate for how long the upgrade takes? Did anyone run into any ma...

Resolved! Palo Alto uses management self IP for requests

Hi everybody, I have an issue when generating requests from the PA itself: it always uses the management IP address as source. So in my client's architecture I need it to use the internal interface's IP address to get the internal DNS or the packet will never come back. Do you know how to do that? Thank you! Regards

Row data showing blank under acc

Hi Friends, Any idea why fews rows data at the end of second page showing blank under ACC tab application section? any idea what might caused this else any known issue with 6.1.10 version? Thanks in advance,

Connect TS Agents to UserID Agent

Is it possible to connect TS (terminal server) agents to the UserID agent and then have the firewall pull the IP/Portrange/Username from the UserID agent instead of each individual TS agent?

Resolved! Exporting log files from terminal server agent

Hi, I've got an installation where we have approx 500 citrix servers running the terminal server agent. The TS-agent has a log file located in the installation folder (debug.log), which I need to look at from time to time. To retrieve the log file I actually have to log on to each server. From what I've been able to find out, it is not poss...

Resolved! AD OU / ACL Rule

Can Palo Alto use computers identified in a specific Active Directory OU in an ACL rule? If so, how? Thanks in advance.

Resolved! OPenswan is it supported for vpn ipsec with palo

Hello someone implement openswan with palo if yes witch version did you used and how did you implement it?

Resolved! Cannot download PAN-OS version due to bissexstile year. Value error: day is out of range for month

Hi All, today one of our customer has tried to download and install PAN-OS version 6.1.10. Customer has currently installed version 6.1.4. This error appears: Error transcript: ------------------------------------------------------------------------------------------------- Successfully downloaded Preloading into software manager Tracebac...

Resolved! Vypr VPN

Hi, Has anyone used VYPR VPN. We are seeing users use this quiet a lot and they are bypassing the firewall to get onto whatever they want. We have submitted to PAN to create an application for this as one does not currently exist, but we need to block this in the mean time. I know we can create a custom application for this, but I am not e...

Resolved! Access to some posts being denied. Access to restricted areas of the portal.

Hello, everyone! Can someone please tell me what I need to do to be granted access to the restricted area of the portal? I am looking for information about compatible third party SFP and SFP+ transceivers for 5000 series. I tried to reach this link: https://live.paloaltonetworks.com/t5/Archived-KB/Archived/ta-p/59404, but my access was denied: ...

Resolved! Games consoles behind a PA-500

Good afternoon all,We are trialling a PA-500 at the moment and so far very impressed with the device. We have managed to configure everything we are likely to need to do through the firewall but this isn't a show stopping question/issue.We have multiple Xbox 360's and Playstation 3's here and the number will be increasing. We would like to be ...

SSL Descryption Windows 8

Hello everyone,I have a big problem with SSL decryption. I introduced it in my network and I sent certificate via GPO to all computers. On Windows 7 all is working but on Windows 8 I received information about a bad certifcate. Obvously I checked certificate container and all is fine but this doesn't work..

Palo Alto Networks recommends deferring upgrades until March 1

Due to an unforeseen issue with an upgrade script, Palo Alto Networks recommends deferring upgrades until March 1. This impacts all versions of PAN-OS. We apologize for the inconvenience. Corrective action is being taken to prevent similar issues from occurring in the future.

Recommended version PanOS for this vulnerability Unauthenticated Buffer Overflow in GlobalProtect/SS

Hi, Can you tell me the recommended version/stable from Palo Alto in PanOS (6.x and 7.x) to mitigate this new vulnerability: Unauthenticated Buffer Overflow in GlobalProtect/SSL VPN Web Interface I recommended the 6.0.12 and 7.0.4 to my customers but after this vulnerability i have to change the recommended version. Regards,