General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Palo Alto Networks recommends deferring upgrades until March 1

Due to an unforeseen issue with an upgrade script, Palo Alto Networks recommends deferring upgrades until March 1. This impacts all versions of PAN-OS. We apologize for the inconvenience. Corrective action is being taken to prevent similar issues from occurring in the future.

Recommended version PanOS for this vulnerability Unauthenticated Buffer Overflow in GlobalProtect/SS

Hi, Can you tell me the recommended version/stable from Palo Alto in PanOS (6.x and 7.x) to mitigate this new vulnerability: Unauthenticated Buffer Overflow in GlobalProtect/SSL VPN Web Interface I recommended the 6.0.12 and 7.0.4 to my customers but after this vulnerability i have to change the recommended version. Regards,

Resolved! Upgrade PA-3020 from PanOS 6.0.3 to 6.1.10

Hi, im thinking to upgrade my PA from 6.0.3 to 6.1.10. Is this 6.1.10 a stable version?? its affected by last PA vulnerabilities??? i would have to donwload 6.1.0 and install directly 6.1.10 right??

Google Drive & Drop Box

Hello We are in the process of setting up SSL Decryption. I am aware that it will break googledrive and dropbox desktop application. For google drive I am aware that you can set a unsafe network flag as a workround Does any have a list of URL that need to be put on to the no decrypt list for these two application to work ?

Palo VM not redistributing routes

I've attached a screenshot of the portion of the network I'm working on. Our edge routers connect to ISP, ISP advertises a default route to our Cisco ASR. On the ASR I have BGP peering with the ISP and OSPF for internal routing. I have default-information originate on ASR. Connecting to the ASR I have a Palo Alto VM with OSPF adjacency forme...

Is 29 februari a myth?

I wanted to do an update to our firewall today and to my surprise i recieved the following error: ValueError: day is out of range for month Failed to load into software manager. Please retry. Post processing failed. Please retry. Apparently there is one day in four years which is considderd "no update day" 😛

Resolved! Improvement Request: DaGPusher

Hi Luigi, Is there any plans to customize the tag criteria sent through DaGPusher? If you have two DagPusher from two different miners, it is complex to figure out which one is coming from one DaGPusher and which one is coming from another. Thanks Regards,

Resolved! BUG : DAGPusher Output Node UI?

Hi Luigi, With MineMeld 0.9.3 running on VMware Fusion, DAGPusher Output Node Handled devices list does not appear (see attached screenshots). Tested with Safari 9.0.3 (11601.4.4) and 48.0.2564.116 Thanks Bertrand

Resolved! DHCP Option 66

Hi All, I want to configure DHCP options 66 on Palo Alto firewalls with PAN-os version 6.1. It seems that before 6.1 version is it possible but now is not included. Is there any workaround in order to set this one? For example is it possible via CLI? Thanks in advance, Best Regards Luca

About url-block-cache

Hello, I have some questions about url-block-cache. I use continue action on url-filtering. URL Contiunue Time is set 12 hours. 1. HA is Active-Active on L3. It seems to no share url-block-cache between peers. Each results is different from "show system setting ctd url-block-cache" command. Right? 2. How many can PA have on url-block-cache...

Can you have an Inter-VSYS shared gateway on a VLAN or subinterface?

I see you can have an interface assigned as a shared gateway for inter-vsys traffic but can you do that at a subinterface or vlan level? Dana

Resolved! Virtual System Migration and clustering

I cam across a scenario where we need to migrate a virtual system from a PA device to another . devices are the same model . Is there any suggestions ? what is the best approach to this ?Also , if a PA device is running virtual systems how we can add it to cluster ? what happens to VSystems ? do they automatically replicated to the other node ?

Resolved! Issue with my Palo Alto Lab

Hello folksI have a strange issue in my lab , here is the scenario :VM-100 on ESXi PAN OS 7.0.5Inside interface connected to internal zone (10.0.1.0/24 network) outside interface connected to my home firewall ( 192.168.1.0/24 network) Interfaces have IPs on the same range as their zones : 10.0.1.10 inside interface , 192.168.1.10 outside. Modem ...

Resolved! How to tell which Objects & Rules are being used.

I want to find a way to tell which address and services objects are not applied to a NAT or security rule and which NAT and security rules are not getting used?Any Ideas on how to get this information?ThanksBane

Wildfire reports association to wildfire-virus

For every wildfire-virus signature tripped in Threat logs should I expect to recieve a corresponding wildfire report in the Wildfire Submissions too? Could someone answer or point me to documentation please.