Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Maximum number of custom app-id's

Hello,

Does anyone know what the maximum number of different custom app-id's, that is supported on the different devices?

Especially interested in the maximum on the PA-5060

Jo Christian

Resolved! GlobalProtect single sign on did not work

I have problems to use single sign on for the Global PRotect client with windows 7. I have enabled SSO and disabled the save login credential button but I even get the Authentication window.

User-ID Agent identifies local PC users so captive portal never kicks in?

I upgraded our PAN from 4.1.x to 5.0.10 and also upgraded the User-ID agent from 3.x to the latest 5.x.

We have some rules configured with groups specified and we have captive portal in place and what used to happen was if you came along on a domain j

...

Dynamic updates ERROR after updated 6.0.0. Why? HELP

HI ALL

I updated yesterday software from 5.0.10 to 6.0.0

But after such an error occurred

Before that everything was normal

But after such an error occurred

many reboots, many check updates but the error is still

WHY HOW TO FIX HELP

Resolved! X FORWARD FOR with USER ID

Hello

is it possible to use ip retrieved from the x forwarded header and combined with the user-id.

my aim is to filter access per active directorie usergroup, but I have a proxy implemented between the palo and the user device.

thank

Functioning DLP Policies

Has anyone implemented DLP on the Palo Alto firewalls that actually provides consistent results? I am struggling to get even something as simple as a regular SSN# to log and alert every time. I am using the built in regex for SSN and SSN without dash

...

Resolved! Registry entry for Connect Method?

Does anyone know what the registry entry is for changing the "Connect Method" to on-demand? I am trying to push out the GlobalProtect client via WSUS Package Publisher. I am able to do the install and push the "Portal" key in the registry, but don't

...

Resolved! PANOS 6 Port mirror decryption

hey

where i should get the license mentioned here for enabling this feature

• Decryption Port Mirror— Provides the ability to create a copy of decrypted traffic from

a firewall and send it to a traffic collection tool that is capable of receiving raw p

...

GlobalProtect ip-user-mapping issue

PA-500

PAN-OS 5.0.2

Hello, we've deployed GlobalProtect with local user authentication (authentication profile = local database), user identification is enabled both on trust and vpnclient zones.

Also, user mapping is enabled with UID Agent directly fro

...

trafic redirection

Hi,

I have a PA200 and i want to pass all users by this firewall, include whos connect with wireless

how can i configure PA to inspect wireless users

thanks in advance

Sarah

Suspicious DNS Query (generic:msreg.gale.com)(4034267)

I didn't find many about this domain "msreg.gale.com", Could someone help me to determine whether or not a false positvo??

In the link below say it is not malware.

It's Word 2007 - "Connecting To" Pop-ups

http://social.technet.microsoft.com/Forums/offic

...

Resolved! Blocking page with SSL

Hi

in the normal way palo could answer directly to the client device wiht the bloking page when url filtrering match the categorie.

but

when the application is SSL the palo couldn't answer with the bloking page and reset directly the session.

is it pos

...

Hello community I got a issue that I would like your assistance on

Hello community I got a issue that I would like your assistance on:

PAN is passing traffic but its failing to reach the destination point, PAN isn't receiving traffic from destination .customer asked to keep ticket open so, he can check is the destina

...

App-ID not working properly

Hi All,

I'm working in Active/Active VWire mode, OS 5.0.9. version of PA is 5050.

while I'm trying to block applications, I noticed the applications are been blocked in monitoring, but in real nothing is blocked.

one more notice is that most of the web-

...

Tunnel and PBF Monitoring Driving Me Crazy

Okay, I can't think straight. Sorry if I ramble on. I can't seem to wrap my head around this and I'm thinking I am making it more complicated than it really is. This is also hard to test since I can't turn up the new ISP yet.

Here is my situation: I n

...