General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Slow Performanced Based on Order of ACL Rules

We have several PAN 3020s at a client site with similar issues but for this, I’ll focus on a specific case. One pair in Active\Passive HA has 124 rules. We started noticing really slow RDP connect performance. (it would take 45 seconds to establish an RDP session to a target where the traffic was passed through the firewall). Out of the 124 rule...

Inbox | Palo Alto Networks Live

Inbox | Palo Alto Networks Live Hello All, I have faced the similar kind of issue for panorama , one Job got stuck in 40% and we are not able to commit to the panorama. Also the management CPU was 100. Well after restart the management server the issue is resolved for clearing the job .but i took the PA support guy to clear the PID to redu...

Don't see Threat and URL log in panorama

Hi All,I have a problem with Panorama and devices log.Panorama informationmodel: Panoramaserial: xzy......sw-version: 5.1.0app-version: 445-2292app-release-date: unknownav-version: 1317-1787av-release-date: unknownthreat-version: 445-2292threat-release-date: unknownlogdb-version: 5.0.2My Device informationmodel: PA-3020sw-version: 5.0.8global-pr...

Migration Tool

Hi Friends,Need Small help Please share the Migration Tool. I have but when try to run got some error.Thanks Satish

Some VPN packet is being dropped and particular counter increased and traffic slow.

Hello guys,I have a issue about the IPsecVPN tunnel. One side of IPsecVPN tunnel is slow for receiving traffic but opposite side is OK to receiving traffic.flow_tunnel_activate 2 0 info flow tunnel Number of packets that triggerred tunnel activationflow_tunnel_decap_err 47373 0 d...

Custom signature for Wordpress

I am fairly new to custom signature in Palo Alto, just so you are warned. I am trying to create a vulnerability signature for detecting wordpress. The Get request will contain /? followed by 5 digits or more. User agent will be wordpress/ followed by version number. My plan was to create one signature with one condition for User-agent ( http-r...

Resolved! Activate Brightcloud URL DB

Has anything changed with the way to activate Brightcloud URL filtering db in version 6? I updated several other boxes which use the pandb db and do not have issue.The one box in the wild we have with Brightcloud Url filtering is the only issue. It does not show as activated under Licenses (with no button to activate it). Its license is valid th...

Resolved! Active directory 2012 R2 integration with PAN os 5.0.9

Hi All,I've Palo Alto 5050 Active/Active Vwire deployment. the deployment was integrated with Active directory 2008 R2, but now I installed Active directory 2012 R2.but Palo Alto can't see the users in Acitve Directory 2012 R2.Any help about that please..Regards,

LAGG Interface Documentation

Is there any documentation about how to configure a LAGG interface in PAN-OS 6.0?I’ve read through the administrators guide, and did a search on the PA documentation web site, and I couldn’t find anything.Thank you!-- Rick

In my PAN firewall, I can see a lot of spyware detection in Monitor tab.

Hi,I can see a lot of spyware detected by PAN firewall. The threat is like- "Suspicious DNS Query (conficker:xtujyzyo.net)" .Does anybody knows about this kind of issue?

Resolved! Logging stopped in Pan OS GUI

Hi all,We had an issue today where we noticed the logging data stopped displaying in the Pan OS GUI (PA-500).. One thing we noticed is after committing a config change, it looks like the firewall was in the process of doing a sync with the backup device. I assume to resolve this problem we need to restart the dataplane? I'm surprised it allowed ...

Replace a panorama managed device with a new device (different model)

Hi All,We need to replace old PA2020 (PAN-OS 5.0.10) that is managed via Panorama (PAN-OS 6.0) with new PA3020.Referring to Panorama adminstrator guide 6.0, "How do I replace Panorama or a managed device in the event of a hadrware failure/RMA?"Questions:1) Can device state export from a PA2020 be import into PA3020 (new device)2) Should we use P...

Havex Malware

Hi all,Do you have any information about PAN detection capability for the Havex malware family: http://www.f-secure.com/weblog/archives/00002718.htmlThreat vault seems to produce no hits at the moment. Tuomo

Resolved! LAGG Interface Documentation

Hello,Is there any documentation about how to configure a LAGG interface in PAN-OS 6.0?I’ve read through the administrators guide, and did a search on the PA documentation web site, and I couldn’t find anything.Thank you,-- Rick

Resolved! Transitioning from Trial URL Filtering to Paid

I am currently using a trial of the URL filtering license and have made the purchase for the full license. Does anyone happen to know if it's a seamless transition from the expired trial to the full license with out any interruption? To initially enable the service I had to reboot my firewalls one at a time, It doesn't make sense that I'd have...