General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Default Gateway from the Palo Alto Firewall is not reachable

Hello,

I have configured inside, outside and DMZ on the Palo Alto firewall. The outside interface is configured for Global Protect.

The default gateway of Palo Alto firewall is not reachable. But when we connect to that cable to ASA firewall we are abl

...

Resolved! Alert Config

Folks,

I would like to configure the PAN firewall to send an email alert whenever the firewall config is changed or edited . Any ideas on how to accomplish this ?

Thanks

Size of Logs

Hello Guys,

I would just like to ask if anyone of you have an idea of what is the usual size of the logs that is being forwarded daily?

We are trying to size up a logs correlation software and we would like to know the amount of specs that we need. the

...

Resolved! Newbie setting up URL Filtering... can't find an answer by searching.. :-/

Hi all --

So I was asked by mgmt to block social networking, streaming, etc for all users except administration. I created a custom URL Filtering profile that blocks those categories, as well as several specific sites. Under Policies -> Security, I

...

Pando Daily now Pando.com

FileSharing site Pando.com has gone bankrupt as of August 31st, 2013. Since then the news aggragation website Pando Daily has taken over the vanity URL pando.com. Since we have a blanket filter for all "FileSharing" categories, our users can not ge

...

Windows Server 2012 ms-update

We are using WSUS to manage our Windows updates. It's hosted on Windows Server 2012 and runs smoothly.

We recently added a Windows Server 2012 in DMZ and pointed it to our WSUS server:

server --- DMZ --- PA2020 --- LAN --- WSUS server

The PA2020 does no

...

Resolved! Agentless User-ID

Hi,

I am having issues with getting the user-mappings after configuring the PAN as an agentless user-id with an AD. I have followed all the steps in this document

-> https://live.paloaltonetworks.com/docs/DOC-4332.

All are good except that when I run th

...

Resolved! How to process OSPF in FW?

Hello,

I heard from someone in the past that control plane send ospf hello packet and data plane has routing table.

Is it correct??

OSPF issue occurred in my custom site. So I wonder it.

And what is the different between routing table and FIB?

Thanks.

Upgraded to 5.0.9 ? User Identification stops working?

Hi,

I had 2 PA's running with user-identification using the user-id-agent.

Both have the same config, running 5.0.7

I upgraded both to 5.0.9

one is working fine, the other one does not "see" the user anymore.

Tried the normal stuff: reboot, reinstall, tri

...

problem with group membership display in PAOS 5.0

I use the command :"show user group name domain \domain users" , the response from the firewall is :"User group 'domain\domain users' does not exist or does not have members" .

The domain users is the default group for the new user, I think maybe some

...

Resolved! How can i create a "next VR" type route in panOS version 3.1.12?

Hi, guys

I have two Virtual Routers in a Virtual System in a 2050 Paloalto NGF version 3.1.12

I want to create a Static route in one of this Virtual Routers to send that traffic to the other Virtual Router similar like i do this in version 4.1.

In versi

...

Resolved! Agentless user-id: Can it connect to only one AD or to multiple ADs at the same time?

Agentless user-id: Can it connect to only one AD or to multiple ADs at the same time?

Resolved! Policy log settings

Hi Pals,

I would like some second opinion on my observation reg. the option 'log at session start' and 'log at session end'. I have tried both options and at the same time monitor the generated traffic logs for each setting. This is my observation:

a)

...

Dynamic block list and custom blocked page

Hi,

I am planning to use custom blocked page. So far I have got the logic of creating custom block page and using it in the policy. I would however like to know if I can somehow redirect user to custom blocked page and inform user that his/her access

...

File blocking..

Hi Gents,

I have a Palo Alto 5050 installed between users and my Server Farm.

I configured a security policy to allow access to the File Server, and applied a File type profile to block files such as exe, avi, and FLV.

but the file blocking doesn't work

...

Discussions

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource