General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

how to see posted data sent by attackers

Hi..Is there a way to see content of posted data by attacker.For example content of Generic HTTP Cross Site Scripting Attempt or sql injection.Palo alto shows only the name of attack and some information about them

Safe Search Enforcement blocking all Google / Bing / YouTube searches

We enabled Safe Search Enforcement in our URL filter:

but found that all Google / Bing / YouTube searches are all blocked. Users are told to enable Safe Search or strict filtering.

Is this the expected behavior?

Resolved! Does it exist any command to disable and enable a static route from the CLI to change the paremeter from "no-install" to "install"?

And about the question, I've already installed the static route using the GUI but with the "set network virtual-router default routing-table ip static-route <virtaulrouter_name> option no-install" command we can enable the "no-install" checbox, now I

...

MS remote Desktop Traffic

What is the application need to add in policy to open MS remote Desktop Traffic.

Pull Report directly From ACC

I searched for this on the forum but couldn't find it so I apologize if this is a repeat question.

I'm trying to pull a report just as it's shown in the ACC.

Starting off without any filters, within the ACC, I click on the "online-personal-storage" URL

...

Port Forwarding

I am trying to create a webpage to display the video stream of two of our IP Cameras.

The page works perfectly from inside the network but not from outside the network.

I think I need to set up some kind of port forwarding rule on my Palo Alto and then

...

How to find out VM CPUID & UUID on the support portal

Hello,

I have a question of Paloalto networks vm fw, is there any ways to find out VM CPUID & UUID when orinigal register virtual machine on support portal.

I have tried many ways on support portal -> asset, but still not successful.

Joy

Resolved! IPv6 network to IPv6 Internet NAT

Hello all,

I would like to testing the IPv6 network to IPv6 Internet NAT, but however it can not work on my lan testing, is there any documents about it, thanks.

Joy

Resolved! Palo High vulnerability issue.

Dear,

the palo's on our public internet are being scanned for vulnerabilities and other open issues. Last week scanning a issue regarding "OpenSSL ASN.1 Parsing Vulnerabilities port 443/tcp over SSL" on the portal website of the Palo for ssl-vpn acce

...

Block a specific spyware

Hi All,

I just want to ask how can we do a spyware blocking. We want to block mariposa spyware but i tried to configure the policy but it does not deny it.

Thanks.

Weird problem with SSL VPN traffic

Hi folks,

We have two PA firewall pairs.

We have two three VPN systems behind the firewalls -- 3SP SSL-Explorer, Barracuda SSL VPN and Windows PPTP VPN.

We've had a problem over the last week where the SSL VPN systems wouldn't load their client Java app

...

Resolved! Disable Admin Accounts

Is there a way to disable FW admin accounts? Let's say we have a situation where we have consultants who come on site and we only want to enable their access for certain periods of time and then disable them after the engagement is complete. Is thi

...

Resolved! Captive portal - time out

Hello

Where I can change the time when a user enters for captive portal? Caduceus do not want the user session. I have a PA500 Software version 5.0.4

Thank you very much.

PA to Cisco 5505 VPN tunnel

When trying to configure a site to site VPN tunnel from a PA 3020 to a Cisco 5505 firewal I am getting th following messages on the Cisco firewall

received encrypted packet with no matching sa dropping

all ipsec proposals found unacceptable

VPN Tunnel Monitoring

What is generally used for a tunnel interface IP? Can it be arbitrary or must it be an IP that is part of the tunnel? I've read the docs on the site, but they don't say all that much about the interface IP itself.

Thanks!

Discussions