General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Panorama - Want/Need to move log records from Internal Mount Point to External NFS Mount Point

Question:

Can the log records in the panorama internal storage mount point be migrated (through some process) to the external (NFS) storage?

Thanks

Art

Threats alert

Hello Team,

I have configured the panorama threat alert for one of our firewall and its working fine. Alerts has been configured for High and Critical .

we are getting so many alert from one IP (10.32.100.238) , one of vulnerabilities management device

...

VPNs down when COMMIT the firewall

Hi,

when I commit the firewall all vpns was down

I have palo alto PA-500 with software version 5.0.11

Do you help me ?

tks

Paulo Aun

EU - European Union

Is it possible to view the countries that are included in the "EU" object? When new countries are added to the EU, will this object be updated via dynamic updates or by upgrading?

Does anyone have experience with the accuracy of geo ip on palo alto?

Ki

...

Intermittent SSL decryption issues for some, not all.

My Palo Alto Firewall 2050 running 4.1.16. I am having a lot of intermittent SSL decryption issues. I'm not sure what to do with some of these. An example is https://app.plangrid.com.

I can this site when I have made this change and restart

...

Resolved! ftp export log

Anyone know how to translate this show CLI command into the ftp export equivalent?

> show log traffic src in 10.0.0.0

> ftp export log traffic ?? (assuming query would work)

I would prefer not to export all logs only need a subset.

Thanks,

Monica

Resolved! About a session generated by override rule

Hi guys,

A session generated by override rule that can be applied rematch session after commit configuration successfully? Or not? I guess that rematch session would not impact to session generated by application override rule.

Please let me know above

...

Resolved! Apply policy on a vwire interface in passtrough mode

I want to apply a policy on my vwire interface but i have this error:

Operation Commit
Result Failed

DetailsIn VSYS vsys1 from zone VW-MPLS-Trust of type vwire and to zone UNTRUST of type layer3 are incompatible in security rule Application bloc

...

Disable Inspection for Sip ?

In the ASA you can disable SIP Policy Inspection. In the Junipers I think you disable the ALG. How do I do this in the Palo Alto ?

Firewalls often try to apply rules around the way protocols work which can cause them to break. I dont want SIP to be in

...

Resolved! Proxy ID in PAN OS 5.0.8

How many proxys id can be configured for vpn?

Good Technology Issue

Currently, we are experiencing an issue with a product called Good Dynamics version 1.4.31.5. The vendor "Good Technology" is stating that the Palo Alto firewalls are causing an issue with some sort of SSL heartbeat connection. Is there an know iss

...

Resolved! Does vwire mode still send TCP reset after drop packet ?

I can see the traffic status show "reset-server" but I can not receive RST packet for this session on the server.

So I have a question, does vwire mode still send TCP reset after drop packet ?

Thank you.

machine authentication

hello!

we have a need to identify user machines associated with a domain. specifically, we want to create security policies based upon domain membership. is that even possible, and how would we achieve this functionality?

thnx!

configure PA-500 to send report using gmail account

Hi all,

Please I need to configure paloalto PA-500 to send report using a gmail account. please can someone help me.

Best Regrads,

Resolved! SSL Decryption Whitelisting

So, I have just implemented SSL Decryption in our environment and we hit a website that appears to not work properly because of it. (It's sap.com, click on the login link in the upper right.) We don't see any errors in the firewall but the login prom

...