General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

GP users stop working each 30 minutes

We currently have version 6.1.4-711 of Global Protect deployed for the establishment of VPN sessions for teleworking users against our perimeter PAN FW. Panos is 10.2.8-h3 We have a group of users (a small part of the total) to whom Global Protect indicates that they do not have an internet connection (when they do) and their communication with ...

Automatically generate a network diagram for auditors

There is such rich data stored in this tool, is there way to generate a network diagram? I need to have up-to-date network diagrams for SOX and PCI audit every year. It would be awesome to have a diagram generated that I could review/update and then hand over to auditors. It would also be helpful during production issues to quick overviews of m...

GlobalProtect Prelogon tunnel and Portal authentication

Looking for assistance on a GP setup. I want to have a pre-logon tunnel (certificate, always on) and a portal, which uses SAML authentication. I also need the user to have to re-authenticate any time they disable, sign-out, reboot, etc. The problem I'm running into is because the portal uses SAML auth, the portal communication during pre-logon ...

Palo Alto and IBM Acquisition

Does anyone know the cutover date of Acquisition with IBM's QRadar and PaloAlto?

Disable and re-enable the 2FA for GP VPN connections

Dear community, What is the best way to temporarily deactivate 2FA authentication for Global Protect VPN SSL connections and enable authentication solely via LDAP server by entering the username and password, we aim to seamlessly reinstate the 2FA authentication without any disruptions or the requirement for end users to re-register their 2FA a...

Unable to find the reason for packet drop

Hello, In our Palo Alto the traffic is allowed on the firewall but it is not working. When we did packet capture we found that return traffic in drop stage. To find the cause of the packet drop I have set the filter using 'Manage Filters' in GUI then use the following command. debug dataplane packet-diag set filter on but I am unable to se...

Palo lato firewall is not fetching latest dynamic updates and software updates

Dear Friends, We have a customer who is not able to fetch latest dynamic updates and software version. we checked, ping reply is coming from updates.paloalto also address is getting resolved, we restarted device-server and management server also we cleared the session from CLI we tried almost everything, then we rebooted device, but no luck ...

Slow GlobalProtect on PA-1410

Trying to see what might be going on with our PA-1410 after we upgraded to 11.0.2-h4 from 11.0.2-h1. We have tons of tickets for slow GP connections since that upgrade a few weeks back. We have a 1gb link and average usage is <100mb. Users will connect to GP, go to the file server, go to open an Excel file and you'll see Excel saying it is...

PA-3410 Refer Latest Version and Upgrade Path

Hi Guy, I am using PA-3410 PAN-OS version 10.2.8-h3, I want to upgrade the firewall to the latest reference version. Thanks to the team, please help me refer to the latest version of the current device and the upgrade path.

Github over 443? How do I allow on specific policy?

We have a specific rule to allow github based on PAN EDL of github v4/v6 addresses. Git works over port 22 but not over 443 with the policy below. I want to allow git over 443 on the policy below but not clear on the best way to do it. Do I need to specify service as ports 22 and 443?

Resolved! Global Protect VPN session keep disconnecting.

For PA firewall, I set GP inactive session 30mins. In user experienced session keep disconnected every 30 mins although client connected VPN and working on the remote PC. How can i overcome it?

Moving BGP from Juniper router to PA 5410

Hello, I'm planning to remove some older Juniper MX routers from the network edge and move the BGP peer configuration to an Active/Passive pair of 5410s. There are two ISPs. For now I'm just hoping to replicate the Juniper setup on the PAs. Right now the PAs statically route traffc to the Juniper where the BGP peers are configured. I want...