General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Aggregate logs on PA-7050 across NPCs?

Hi,

I'm trying to aggregate logs across all dps in the system – right now only 2x NPC.

Using the procedure here: https://live.paloaltonetworks.com/docs/DOC-3876, the firewall says "packet-diag.log is aggregated” but where is it? Does that aggregated lo

...

Resolved! PANORAMA CHANGE HARDWARE

Hello world,

I must change a cluster PA2050 by PA5020 (with the same configuration) and this PA are Managed by Panorama. ( all policies objects are created on Panorama but not policies)

Somebody know how to make this change? which steps?

thanks for you

...

Resolved! What really mean logs of dp-log and mp-log?

Hi All.

I want to know really means that logs of dp-log and mp-log as below. I think that logs would be very useful for troubleshoot when problem occur. please give me that logs info in detail.

admin@UQUEST_PANOS40_PA2050> less dp-log
brdagent.log

...

Aruba ClearPass and User-ID

We use 802.1X on our network for user authentication and assigning VLANs dynamically. Our edge switches (Brocade) and Aruba Controller are configured to use Aruba ClearPass to authenticate each user. ClearPass uses LDAP (freeIPA) to look up users. Cl

...

SHA256 forward decryption on Palo Alto Networks Firewall PanOS 5.0.15

I have a private subordinate CA signed using sha256. This is my forward decryption certificate. The trust anchor is also sha256.

With forward decryption enabled on my PanOS5.0.15 device, the certificates generated by the firewall are signed using sh

...

Resolved! PANGPS and PANGPA client connection flow.

I am new to global protect client.

Looking at PANGPS and PANGPA logs lot of information is there just trying to understand correct flow.

Panorama and Active/Active Setup

I'm setting up two 7050's in an active/active configuration. What is the best method to handle this with Panorama? Right now I only have one of them in there and it seems like only one of the nodes is getting my config changes even though I have conf

...

Resolved! Block pornographic Google images.

I have URL filtering configured that blocks pornography, but if I search in Google for pornography and then click on images, pornographic images are accessible. I know that I can block these in Chrome browser, but how do I block them as a policy via

...

Global Protect Problems on a Mac

Running Global Protect version 2.1.0-50 on a Macbook Pro with OS X and Yosemite. Connecting to a PA-500 running PANOS 4.1.8.

When I finish using my Mac for the day, I put it in Sleep mode so that it starts up again instantly. But if the VPN through Gl

...

allow single url

Hi,

on URL-filtering how can I allow a single URL (i.e. docs.google.com) and block all the others ?

Thanks.

Resolved! AppID Palo Alto SSL

Hi,

im checking my logs about AppID behaviour. i realised that in traffic https (withouth SSLdecypt policy configured) the PA is detecting facebook-base in SSL connection but with youtube for example is not detecting the app and it shows SSL. Why in

...

Identifying unknown-tcp in Monitor tab

Hello,

We have a PA-3020 running 6.0.3. Basically we have iSCSI replication set up between two sites. When I pull up the traffic in the Monitor tab I see the picture below. Even though iSCSI traffic is defined in the Applications section I tried cr

...

Resolved! Netflix and HTTPS

I am curious what the general take of the recent Netflix announcement is with regard to our ability to control the traffic. Announcement here . I have an opinion as to whether it is necessary, but that is another subject altogether.

It is clear there

...

Resolved! User-ID Agent „established a connection to suspicious IP ...“

Hi everybody,

does everyone have this situation on your PA-FW on the ports 137, 139 and 445 with country's: CN, US, MY, IN ...

We have a lot of outgoing traffic with this situation and find out, that the PaloAlto "User-ID Agent" is the causer.

A lot of

...

What on base are showed for "show all signatures" of exception menu in vulnerability?

Hello,

I have a question.

What on base are showed for "show all signatures" of exception menu in vulnerability?

I knew installed threat version in FW show.

But I guest it is not fact. Look at the following images.

The above FW does not have threat signa

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource