General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Management Interface outside of firewall

Knowing that one does not *usually* put a device management interface outside of the firewall, on the public Internet, in the case of PAN gateways is there any severe problem with this? I have a situation where putting the management of these devices

...

Resolved! Data filter with SSH proxy decryption

So, I would like to be able to enforce file blocking between our external FTP,sftp,scp server that is published in our DMZ. Users coming into the DMZ are NAT'ed from a public IP space to 172.16.0.0/16 space. I have enabled SSH proxy decryption betwee

...

Resolved! When PA move Active-Passive what problems?

Hello~

PA Devices are HA environment

one of them failed disk or temperature raise

Does PA move other device?

because I don't know exactly about moving HA

Link Fail, Path Fail, HA Link Fail I know

I think that Environment occur alarm(FAN, Disk, Temperature,

...

VMware and Paloalto

Anybody had issues with VNware servers and Palalto firewall. Suddenly our webservers not able to communicate from DMZ to internal network where the SQL servers are.

Adrian

User Agent report?

Hi,

PanOS 4.1.14. Is it possible to report on user agent connecting via my 2020? To be able to report on Firefox, Chrome or IE versions for example would be useful .

Further still..(and I doubt this..) to instigate a policy based on a user agent?

Tha

...

Resolved! Customizing Captive Portal login response page

I'd like to customize this page, but I don't see it listed in the GUI (5.0.x) Device Tab / Response Pages. I can see the rest, including the Captive Portal Comfort page... but no logon page?

The page in the web browser is titled "User Identification

...

Custom whitelist (size matters ?)

Dears,

After changing the URL filtering Db from Bright CLoud to PAN Db, many many brazilian sites became "unknown"... Then by default they are blocked...

We have created a custom URL Category called whitelist, and then we are putting there all these UR

...

how can I get entire session table?

Working on the 5060 in 5.0.7, the active session count is around 60k+, in cli 'show session all' output will only return ~3000 sessions. API returns 9995 lines. How can I get the entire session table?

The use case, I will like to be able to take a

...

Resolved! Palo Alto Slow

Hello all,
I am having a little problem of slow when I browse the web interface of the Palo Alto (very slow loading pages ...)
Do you have an explanation for that?
My version of PAN OS Software Version 4.0.14
thank you

PANOS 5.0.8 User-ID problem.

Did anyone have a problem with user identification (IP from AD thru User-ID application), I have above with 5.0.8, on 5.0.7 is OK. Users from local subnet are correct discovered, but from other then PA subnets arent.

Regards

Adam

Resolved! PA-5000 Series Disk hot swap?

Hello~~

I am very curious,,

It is simple question

as far as we know, PA-5000 Series can install RAID 1 Disk

If PA failed either disks

Can PA continue logging another disk?

If so

When failed disk exchange, Does have to reboot PA?

I am extremely confused now

I

...

Resolved! Palo Alto at Home

My current setup at home consists of a comcast modem - PA-200 - linksys wireless router. For this setup, I have the PA in vwire connected to the modem and my wireless router is performing DHCP.

Last night I attempted to change my setup and took down m

...

Palo Alto User Groups? (Real life...not firewall objects)

Does PA conduct user groups for existing/potential customers to get together to hear about upcoming product features, discuss real world experiences, challenges, best practices and unique solutions....meet with the development/engineering team etc...

...

Timeout Countdown for defined applications

Hi

Currently running a pair of active/passive 4020's and I have a question regarding timout values set on applications.

I have set up a new application with a TCP timeout value of 4 hours, is there any way of monitoring the count down from 4 hours to 0

...

PAN-OS 5.0.7 Never again

Hi,

We upgraded our PA to PANOS 5.0.7 and the day after the users report several problems: accessing to internet, and the vpn client Global Protect wasnt working. We have done a revert to the version 5.0.5 and now its rowking propertly........

Anyone h

...

Discussions