General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

PAN in Layer 2 mode and Microsoft NLB

Hi!

Customer configured Palo firewall to work in Layer 2 mode to protect VLAN. In that VLAN there are two servers in MS NLB configuration. In VLAN configuration in Palo, static MAC entry is configured for virtual MAC address, but that entry isn't disp

...

Resolved! App and Threat Compatibility MisMatch

Hey there,

I have 2 PA-500's currently on:

Software Version6.0.2GlobalProtect Agent1.2.3Application version461-2402 (10/14/14)Threat Version461-2402 (10/14/14)Antivirus Version1391-1863 (10/13/14)URL Filtering version4392

Software Version6.0.2GlobalProt...

Resolved! PA-5020 Fans?

Just checking to see if this is normal.

I got a report today that the fan speed on our PA-5020 will speed up at random times, and calm back down. It's loud enough people can hear it outside of the closet.

Is that normal?

SSL Decryption

Hello,

We have quite a few students using hotspot shield and other tunneling apps to get around our filter. I've been successful in block a majority of them by blocking the hotspot shield app. However there are still a number of them getting though by

...

Resolved! Can not check Forward Trust Certificate

Hi All,

My device is PANOS 6.0.5;

I have a problem with Certificate configuration.

On my device, I generate a Certificate follow How to Generate a CSR(Certificate Signing Request) and Import the Signed Certificate;

After, my 3rd party CA issue complete,

...

Certificate Bundle

Hi,

I'm get error on commit: "Warning: cannot find complete cerficate chain for certificate Certificate_Bundle"

I notice there are three bundles in the device certificates, but how do I know which bundle is being used?

How to I test this without breakin

...

How to read SNMP Values from VPN-Tunnel-Interfaces?

Is it very easy to read SNNP Values from physical interfaces:

Connect the SNMP Browser to the PA

Set the right Community password:

PA shows you the interfaces - but only the physical IFs.

How to read SNMP Values from VPN-Tunnel-Interfaces?

Roman

See: Palo

...

Resolved! GlobalProtect Client and Windows 8

PA-200

Software version 6.01

GP Agent 2.0.4

I've installed GP client on perhaps a dozen workstations, and finally have one that will not authenticate. Help.

Installed the machine certificate okay, installed the agent. Opened the app from the system tra

...

HA failover when 1 port loses conectivity

Looking for ways to setup a PA5020 pair for HA that takes into account if the link to one interface goes down the system fail over. I have hear of possibilities of using a "HEARTBEAT" up the link to cause the failover when it fails.