General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Can't get syslog to work via data port

Hello folks,

Maybe someone has seen this before. I've got my syslog profile, log forwarding and policy setup the way they should be configured but the only exception is that I'm using a data port and UDP 1514. I've configured a service route and also

...

Resolved! Configuring a port for a dedicated WAN link.

I recently ordered a 1GBPS dedicated fiber connection between my primary site and DR site. The ISP doesn't assign me an IP address or anything and says it is just a layer 2 connection. So I am a bit confused on how to configure my PA 3020s(one at e

...

critical severity default action alert

I am trying to understand the meaning of the default critical vulnerability action "Alert". This question was brought up by management who gets the PAN Content Update email and I want to give them an accurate answer.

For example, Adobe Flash Player M

...

Resolved! Baseline Procedure for DOS Prevention

Hello everyone,

I was looking at setting up the DOS profile/protections on a PA-3020. I obviously need to baseline the traffic/system and was curious if there are

any docs, Perhaps hidden, that would help me in this.

Essentially I will need to grab sta

...

How do I create a browsing report thats easy for a CEO to read...

Hi,

I have been tasked with creating a report out of our Palo Alto firewall that shows the following.

For a period of 1 month

Users Hours\Sessions on a website

Top 20 visited websites.

Top 20 Categories.

We are using the user agent so all the data should b

...

Trouble differentiating between malware already seen by WildFire and malware 'first seen' by WildFire

I'm having trouble determining which malware has already been seen by WildFire (therefore it was not re-sent for analysis and blocked by the FW) vs. a file that our organization sent to WF and was determined to be malicious after analysis (not seen b

...

Resolved! Custom Button on URL Continue Response Page

Is it possible to create a custom button for the URL Continue Response Page? My customer is complaining that the Continue button that is part of the pan_form is too small and would like to create a larger one to use.

Polycom can not answers a call

hi all.

i have a problem with palo altl and polycom.

When i make a call from inside to outside >> it ok

when a call from outside comming >> i can not answers

i open all port, allow all application as: h.323, h.252, rtp...

pls help me know why

Import ssh key

Is there a way to import an ssh key into a firewall?

For instance, I run the following commands:

ssh-keygen -t rsa (The public key is now located in /home/demo/.ssh/id_rsa.pub The private key (identification) is now located in /home/demo/.ssh/id_rsa)

ss

...

QoS Guaranteed

Hi,

I would like to book (guaranteed egress) 5Mbps for streaming in one of my vlan. My outide-Internet (egress) interface is eth1/1.

The class for streaming is CLASS 1 (real time) right????

whats the difference between "clear text traffic" and "tunnel

...

Resolved! ISP Failover Email Alert

Recently we configured ISP failover on two PA500s using PBF for the primary ISP and the virtual router for the backup ISP. We would like to setup some kind of email notification, or alert when this failover occurs. I've looked through the Admin Guide

...

How to configure PAN to Azure VPN tunnel

I'm sure I'm not the first one to do this, but since I wasn't able to find a document on how exactly to do it, I figured I'd contribute one. I'd appreciate any corrections or optimizations.

The Azure side documentation is pretty clear online and hones

...

GlobalProtect Pre-Logon with Windows 8.1

I have been testing out a new GP portal/gateway on my firewalls for Pre-Logon/Always On as I would like to eventually like to move all remote workstations to this model. With that said, I notice when I enabled the pre-logon and SSO a new icon shows

...

Resolved! Monitoring Accessed URL's

Hi Everyone,

We have the URL filtering license, I am trying to log all websites that a user access, however, I noticed PA only logs websites which the user fails to access due to a URL filtering policy, ie only websites that are blocked from the user

...

Resolved! Destination NAT of ESP and GRE

Hi all,

I'm hoping somebody might be able to help with this unusual scenario please?

I have been tasked with replacing an old linux based firewall with a PA-500 device.

Initially the configuration of the PA-500 should just replicate what the current fir

...

Discussions