General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Upgrading and restoring the backup based on different versions

Hi all, I am using pan os 7.0.2, can we restore the current config saved file to 7.0.1 or 7.0 with regards,Ram Balaji.

PA object naming schema/convention?

Was about to create a naming schema for PA firewalls objects, but I am wondering if someone already has something I can model mine on so I don't have to reinvent the wheel.

Reports only show 5 rows of information

I'm attempting to create a custom report, where data is generated in either 10 or 25 rows. For example: Top 10 denied applicationsTop 25 URL CategoriesTop 5 users for top 5 apps My problem comes when the report is generated and emailed. No matter the custom report, the data will only show the top 5. So I get: Top 5 denied applicationsTop 5 URL C...

Resolved! How to Configure Action for 'automatic blocking an IP for an hour' in a vulnerability scanning?

Hello,This would be possible to implement?Configure my firewall to make a action for 'automatic blocking an IP for an hour' in a vulnerability scanning.Objects -> Custom Objects -> VulnerabilityExample: IP auto-block attacker for 1 hour, if 10 times in 10 seconds Any Scan Vulnerability Bash.I want "OR" condition. Here. addition to "IP add...

Could I change session timeout to 24 hours for all applications?

Hello, I have two questions.First, Could I change session timeout to 24 hours for all applications?Each applicaitons have each different session timeout value.My customer would like to change session timeout of all applications to 24 hours.Do you knew way better easy? Second,I knew there are two way for changing session timeout.The one is global...

Palo Alto on Microsoft Hyper-V

All the documentation i have read say PA is supported on VMware ESXi but i want to know if it can be installed onMicrosoft Hyper-V.

Resolved! WildFire logs not consistent

I'm having problems with Wildfire logs on one device (PAN-OS 6.1.6). In Data Filtering logs I can see many files being either uploaded to WF or skipped recently. But in WF logs I only see some old files marked as 'malicious'. I don't have any filter set. I also checked logs via CLI and the result is the same: just some old files marked as malici...

IPSec-ESP trough PA-7k only unidirectional best practice? Work around bug (ID:80950)

Hi, due to a bug (ID:80950), that PANW is not able to fix, it is necessary to create seperate IPSec-ESP policies for both directions trough the PA-7050. IPSec-ESP that comes in response to a opened session is being dropped if there is no separate policy for incomming ESP traffic. Example:-Client are allowed to open IPSec-Connections from "trust"...

logs in the web console and logs in the terminal are different

Hi , The log in the web console and the log in the terminal shows different .For example session id 39362 is showing different source ,destination , ingress and egress when running show session id 39362Please help Thanks

Resolved! Diferences between Global protect 1.2 and 2.3 clients?

Folks. I upgraded my firewalls from 2020's to 3050's on the weekend (oh, and isn't it a joy to have firewalls that I can actually administer without waiting 20 minutes for something to happen on!), but I ran into a bit of a problem with upgrading Global Protect. My old firewalla ran the 1.2 client because I didn't want to load it up with anythin...

Resolved! BGP MD5 through the firewall

HI,if i want to allow two BGP peers to communicate through the Palo ALto and the two peers use authentication, for other firewalls since randomize tcp sequence is enabled this feature will not work without more config, is it the same case with Palo Alto, is randomize tcp suqunce a default option in PAN and does it require extra config to allow B...

User activity report customization

I'm trying to create a user activity report for a machine used by multiple people. The manager wants to see what internet activity from this machine looks like, across three shifts (24 hour period). I can run the prebuilt User Activity Report against the machine's IP address, and with detailed browsing checked, and it gets everything. The proble...

how set the fan mode to auto

Hello; I have a PA-500 firewall . I'd like to drops the noise of the fan : I log on the device by the CLI and i wrote : set system setting fan-mode auto But a message said taht this command is invalid by the firewall . I follow also the admin guide of PAN and the command that shwoing is : set setting fan-mode auto I wrote this command but witho...

Resolved! Authenticated email settings

Hi All, When setting up email server profiles how can use use an smtp server that requires authentication. For example GMAIL requires you to pass your gmail account in order to forward mail. Thanks

PA 500 doesn't show data, system logs nor application in GUI

I've posted screenshots of my issue. I can see logs in cli mode.