General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

WildFire Capacity Issues - Confirmed by Palo Alto SE

Apparently Palo Alto have confirmed that there are times when WildFire is simply too busy to serve all update requests (we've been seeing frequent failures).Can anyone from Palo Alto comment on what the capacity situation is, what is being done to resolve it, and when the upgrades are expected to be in place by please?It's a fantastic service bu...

Resolved! Browse Time in custom reports

Hi all,Is there a way to include the Browse Time field in the custom report??I hope that someone can help me.

PAN-VM license upgrade from eval to full with HA setup

Hi,I have two PAN-VMs in HA setup running on eval license and just got my full license Auth code but it seems like going from eval license to full license can not be done seamless. I have read about the cloning procedure but need to know how I should proceed with an HA setup in a way that I have minimum interruptions.Appreciate any help on this...

URL Filtering Log shows FORWARD

Hey All - I have several URL-Filtering logs that come through with a category of FORWARD. Everything else is blank (URL, From Zone, To Zone, etc.). Can anyone shed some light on what this means?Thanks!Matt

Decryption certificate

Hi,I have a PA500 (OS 5.0.11)I already configured it for SSL Decryption with a self signed certificate.I need to use a Digicert Certificate. I already have a wildcard certificate with Digicert.Question is: can I use my wildcard certificate for SSL Decryption?How?I try to import my certificate but I cannot use it for SSL DecryptionThanksRegards

FTP

How can I verify whether port 21 ftp traffic is being blocked by the PA 302?

Resolved! PA-200 - commit change and then nothing

I have opened a critical ticket, but was looking for community feedback on this issue.Setting up my new PA-200, troubleshooting a route problem. I removed a rule to simplify troubleshooting, hit 'commit' The progress bar reached '98%' then the device was unreachable by https.I called the colocation staff, asked for a power reset. The device n...

Tunnel

I have a vpn tunnel that works fine most of the time and then is just goes down for no reason any suggestion

Resolved! Management PORTs

Hi guys ,how can i change the management port to other port than 443 ?Best Regards.Thiago Lima.

Special Character in domain name

Hi,I have a domain with special character "&" in the NetBios domain name. In the FQDN name this character has been substituted by "e".By user-identification, PAN discover the users, but some have the "&" character in domain name and some have "e" character in domain name. Then the user's identification doesn't operate well. There is a wo...

High Availability weirdness

Hi.I have a pair of 2020's (I know, don't comment - they're getting upgraded soon, I hope!) which run in active/passive HA pairing.This morning, I noticed the following entries in the logs on my primary (normally active) device2014/06/25 08:58:37 info ras rasmgr- 0 RASMGR daemon sync all user info to HA peer exit.2014/06/25 08:58:37 info...

websense webfilter as proxy

Hi All,I have websense web filter license. I want to integrate it with PAN firewall. Could you share any documents to integrate it as proxy.?Please guide. Thanks

Feature Request

Hi all,I have a feature request (hope PA respond to it...)It would be nice if we could schedule automatic backup configuration using FTP (preferred), TFTP or SMB protocol.Regards,HA

Resolved! Blocking OS specific traffic?

Does anyone know if there is a way to block traffic sourced from a specific OS in our network?We were discussing legacy Windows XP machines. Since they are no longer supported or being updated it would be nice to be able to block them from the internet but allow internal connections to them. (We have a couple of legacy programs we need to keep f...

Curious: How are people doing User-ID?

Hey All -I am just curious to find out how people are doing User-ID? We are currently using the software Agents connected to DC's, and we read syslog from our Wireless Controllers to parse user to IP mappings for wireless. Our wireless solution is only about 50% accurate due to the fact that many times logs are written to the wireless controll...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!