General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Webserver on Network, Need support references on how the PA devices can help secure your network

We have a client that is very concerned about having a webserver on a network that is open to the internet. They already use exchange and as such ports 80 and 443 are open to that exchange server on the network. We are hoping to put a webserver on the same network, but are experiencing push back. The client is of the mind that a webserver mus...

wildfire findings into the pan-db

Hi there,today a user tried to download a wallpaper from www.wallsave.comWildfire says it is Malware.https://wildfire.paloaltonetworks.com/wildfire/reportdetail/2d6540e44f081882b611e1ed702e8f0032d309f0311ae0232f9a9a8da082e306/422433975/2A few engines from virustotal also:https://www.virustotal.com/de/url/59e5f7d67a03d71946dd6b617c1ff130aec6b6b41...

GlobalProtect - RPC connections fail

Hi All,I seem to be unable to get this to work but when connected via GlobalProtect VPN remotely all RPC server communication fails. This can be seen with any of the following tasks:Open Active Directory Users and ComputersOpen Group Policy ManagementAttempt to connect to a DFS file shareattempt to update group policy with GPUpdate command line ...

URL Filter (BrightCloud) Categorizing Many Sites as Adult

I'm not sure how to fix this problem, without using a different service. But we currently block the adult-and-pornography category. We get multiple complaints a day for sites getting blocked because they are categorized as adult-and-pornography. Researching the sites shows about 99.99999999% of the time that these sites are clearly not pornograp...

Terminal Services Agent in Windows 2012 R2

Hello,I would like to install the Terminal Services Agent in a Windows 2012 R2. The agent is supported until the 2008 R2 version. Does anyone knows if there is an alternative solution (e..g force the installation of the agent in the 2012 R2 OS) or when this agent will be released for 2012 R2?Kind regards

Resolved! How do I add additional log storage to VM Series?

Hi All,Well ive searched and everything seems to be related to Panorama.I created a VM series firewall and left all as default, now ive filled up the log. Ive been searching and found someone mention to add a 2nd disk but ive done and reset the VM but to no joy so possibly it was only for panorama.So what is the process? Do i need to turn the V...

Resolved! GlobalProtect Licence

Greetings,I've just upgraded to 6.0.2 and when I commit any changes I receive this error""No GlobalProtect portal licensevsys1portal "portal-tunnel"config"default user-config"modify gateways cutoff time will not take affect.Any ideas as to why this would happen after the upgrade and not previously?How would one resolve this?Thanks in advance.

Monitor NXDOMAIN Unknown Answers (Failures)

Does anyone know if it is possible to monitor for NXDOMAIN Unknown Answers (Failures) with PanOS 5.0 ?Would it be a custom signature/application that needs to be created?

PA500 says virus - virus total says no

We have a bunch of files that we created that we need to upload via ftp to a remote server through the PA. The files trip the virus detector in the PA. Here's a syslog entry with some identifying information changed:2014-06-16T15:22:31+10:00 10.84.1.33 [user warning] 22:31,000XXXXXXX,THREAT,virus,1,2014/06/16 15:22:25,10.84.20.250,50.28.93.0,0....

VM series promiscuous issue?

Hi,Just messing about with a VM-100 and three other VM's on vSphere 5.5...All setup for layer 3.Ubuntu1 <> VM100 <> Vyatta <> Ubuntu2Three vSwitches, promiscuous mode on reject Ubuntu1 to VM100 10.x.x.x/24 networkVM100 to Vyatta 172.16.x.x/24 networkVyatta to Ubuntu2 192.168.x.x/24 networkPolicy all setup, default routes on all...

Resolved! GlobalProtect client updates

Hi all we are a bit behind on the GlobalProtect client for our users (currently on 2.0.0). I assume the update is not incremental. In other words, if I download the most current version (2.0.3) onto our PA-500, our users should get prompted to install which will upgrade them straight from to 2.0.0. to 2.0.3 Is that correct? Also what is with the...

Captive portal and Android cookies: How are cookies stored that are delivered from captive portal?

First, some background. We have captive portal configured and we have a "BYOD" wireless network. We have the cookie lifetime in Palo Alto set to one week.For our Android users, it seems that once they get redirected to the captive portal and authenticate, if they get out of the web browser app and let their phone sleep, they lose the cookie that...

Resolved! Custom App-ID for the World Cup

Will Palo Alto be creating a custom App-ID for the World Cup streaming media this year? I am based in the UK.Regards,James.

Resolved! World Cup 2014

Has anyone found a "simple" way to block the majority of this type of traffic/streaming?I recall there being a discussion before regarding the Olympics but it may have been at one of our local PA information sessions --- something like a new App-Id.

Global Protect Portal with Certificate Profile - client certificate required after upgrading to 6.0

Hi,We are running Global Protect with pre-logon. The GP Portal needs to allow users to login from "clean" computers without machine certificates, and at the same time allow pre-logon user(and other users) to authenticate with machine certificate. This has in 5.0 been done by using a certificate profile with the username field set to "none".This ...