General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! Global Protect on Mobile Devices

GP v2.0.1. Successful authentication is based on a particular AD user group. If the user is not part of the group, he/she would be able to connect. We want to implement this solution for smart devices.. however, how can we control who connects and who doesn't? we don't want a user with a personal device to be able to connect to the portal/ga...

Management server restart

HelloToday I observed that when I try to logon to my PA200 I got error "Connecting to Management Server failed", when I try to logon by SSH "System initializing; please wait...."After few minuts a was able to logon by browser and putty.In system logs :PA200 wasn't much loaded, after this self-acting restart there was some high load:Restart on 04...

Guest VLAN issues with externel services that we offer

Here's what we need to accomplish:We have subnets on our networks that need to use our external DNS server (they are Guest VLANs for our WiFi networks). This traffic is visible by our paloalto firewall with layer 3 adresses (10.XXX.30.0/23). When we access internet with these clients we have no issue at all but when these clients try to access o...

Inline PA vwire on inside interface of Cisco ASA HA/pair inline

I am currently running a pair of Cisco ASA 5520 in HA. I want to protect the traffic going inside with an inline wire on the inside interface of Cisco ASA HA/pair as it travels to the LAN. A pair PA-2020 are configured in Active/Standby with the wire trust/untrust pairs running inline after the ASA HA pair. Untrust zone going to the ASA and ...

Global Nat

How can you determnine what the global nat address is on a firewall?

Resolved! How to setup multiple vpn?

Hi,In our enviroment we have since a month a PA500. We setup VPN with pre-logon with certificate for our internal users, which is very handy!But for our external users I want, they use there AD credentials. Is it possible to setup multiple VPN's? One for our internal users and one for our external users?And if so, how to configure this?Thanks in...

Wire shark

I am trying to troubleshoot why I am having issues with a certain VPN router device through the PA 3020 firewall, This is the message on the packet captureISAKMP Identity protection (main mode).I am new to firewall and if there are any other troubleshooting methods I can use I would appreciate the advice. commands, gui anything

Ping

Can you send ping test from the PA and if so how is that done?

Resolved! Can we use window 2012 Active Directory LADP for the user authentication?

Hello, Guys,My customer is trying to use Window 2012 Active directory. Currently Using security log for the user-id is not supported yet, I guess.But I have one more question with Window 2012. Can we use window 2012 Active Directory for the LADP user Authentication?Thanks ahead.

Stability Issues with 6.01

Hello,since our pa 3050 (HA Active/Passive) is running 6.01 i discovered some issues: The device server sometimes hangs, there is no other option than restarting it (debug software restart device-server) This happens approximately once a day. In this state, SNMP requests to the PA take several seconds to complete, a commit will hang. I wonder, ...

Does v5 or v6 User ID supports Windows 2012 R2 AD

Dear AllDoes anyone knows PAN User-ID supports Windows Server 2012 R2 authentication or not?? I cannot find any information from the KB or document about windows 2012 version.Cheers,Carsen

Is it possible for a web page to discover if SSL decryption is active?

DUPLICATE POST - please see Decryption: sec_error_reused_issuer_and_serial for further info.----Hi folks,We recently re-activated SSL decryption in some of our branch offices. Now of course reports are coming in that certain web pages can't be displayed correctly anymore. Our Italian collegues for example report that they have problems with Goog...

Resolved! Global Protect Client

Is there any way to get automatically notified of new Global Protect Client releases?

Panorama M-100 GUI timeout

I have a problem with a Panorama M-100 running 5.1.4, where sessions in the web-gui seems to time out before they have reached the "idle timeout" configured under Panorama/Setup/Management/Authentication Settings. What happens is that after being inactive for a few minutes (10-20 min), I do no longer get any data when navigating to a new menu it...

Resolved! Google search problem

Dear all,I'm writing to ask a question about the image that I'm showing you.My user can see only a part of the images when he search for that.This is the result of a search with google images:I've read this thread:https://live.paloaltonetworks.com/docs/DOC-3328But, in the end, the problem that I've is slightly different: I can see something up t...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Resolved! Global Protect on Mobile Devices

Management server restart

Guest VLAN issues with externel services that we offer

Inline PA vwire on inside interface of Cisco ASA HA/pair inline