General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Error message: "Internal error during commit process" on Panorama and PA firewall

Hi there,

I am able to add a PA firewall into Panorama (both using PAN OS 10.1.4-h4). I successfully imported device config into Panorama and

also pushed "the device config bundle" to firewall. so far all good as commit to Panorama is successful. Ho

...

Screen Shot 2023-09-21 at 2.31.52 pm.png

Screen Shot 2023-09-21 at 2.32.14 pm.png

Resolved! Allow wildcard DNS in a Network Address

Hello all,

We have setup a Hybrid Connection Wizard between our on-prem Exchange server and Office 365, Microsoft has provided the following link for reference in regards to firewall considerations (https://bit.ly/3dpfiZs)

under SMTP port 25 - the do

...

Incorrect PANORAMA health MonitorStatus

Hi there,

Could you help me understanding of my device status correctly :

I was looking at my device status in PANORAMA's beautiful featrure called "Deviating devices" list. I couldn't quite understand why it is reporting some of my PA devices as dev

...

Resolved! How to view SFP installed on a Panorama or Logcollector

Does anyone know how to view the sfp installed on an m500/600 panorama or log collector?

I have tried the below command and even put a wildcard on it but it only gives me hard drive info.

> show system state filter sys.sX.pY.phy

Making a dataplane interface behaves as a management interface

I am finding some way to convert a dataplane interface sends it traffic like a management interface.

We created a dedicated interface l3 subninterface for netflow traffic to export. we would like to understand if the traffic from this interface can

...

CLI commands to create a SSH profile, via the CLI?

I'm working on a Python script to change permitted-ip addresses on interfaces, uploading it to my resumé to send out.

I'm fairly new to paloalto, however I'm familiar to some extent with firewalls, and familiar with routers/switches.

I want to c

...

Resolved! Global Protect ( VPN client ) - does not allow print jobs

Hi everyone,

I need some assistance, please, if anyone else has encountered a similar issue before.

I have Global Connect installed on our corporate laptops, and it successfully authenticates and provides access to our Intranet, Internet, and print

...

What is object auth_vpn?

Set up email alert. Login When login fails.

A related email has arrived.

I looked at the logs, but I can't find auth_vpn.

What is object AUTH_VPN?

Instagram allows but does not display the login page

Hi Team,

We are not able to access Instagram on the web page.

Please find the attached global counter and pcaps and let me know what king of changes need to rquired from firewall side.

Regards,

Sanket Magdum.

FW Ha Cluster disconnected from Panorama

Dear all,

i m having an issue with a FW HA Cluster that is continuosly disconnecting from Panorama.

I m able to make them connected by issuing a local commit, but after a day less or more, both the FWs are in a Disconnected state again.

There is

...

Resolved! Warning: No Valid DNS Security License

Hi Team,

I am using PA-3220 . We have only Thread Prevention & Wildfire License. Before Anti-Spyware -DNS Signature was using DNS-Snikhole.

Now we change to block we start getting Warning No Vaild DNS Security License . Do we had to buy a license as

...

Resolved! Static Port Address Translation question

This configuration issue seems like it should be very easy to figure, but I have not performed this in the past and I cannot seem to figure it out.

We will have multiple devices on the trusted network, and I need to NAT them all to a single Public IP

...

Resolved! PaloAlto Wont Login after turning off and on again in EVE-NG environment

Hi,

Creating a lab to write some python scripts.

I set a new username/pass under superuser, and updated amin/Admin123 all under CLI, committed,

and set device ip/mask without a default gateway. Turned the machine off. Turned it back on. None

...

Downloading software upgrade on very slow link

I have some pa-220's located at remote places connected to slow uplinks. When trying to download upgrade base image 10.0.0 and its latest minor, the connection terminates by tcp-rst-from-client after 1800 seconds. Then the pa-220 starts downloading a

...

Migrate to PA firewall cause WIFI roaming issue

Hi Support,

We just recently migrate the PA Firewall from cisco firewall. PA Firewall will act as gateway and provide DHCP.
however we counter issue with roaming WIFI where client connected to AP A and change location to AP B without disconnect causing

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

Error message: "Internal error during commit process" on Panorama and PA firewall

Resolved! Allow wildcard DNS in a Network Address

Incorrect PANORAMA health MonitorStatus

Resolved! How to view SFP installed on a Panorama or Logcollector

Making a dataplane interface behaves as a management interface

CLI commands to create a SSH profile, via the CLI?

Resolved! Global Protect ( VPN client ) - does not allow print jobs

What is object auth_vpn?

Instagram allows but does not display the login page

FW Ha Cluster disconnected from Panorama

Resolved! Warning: No Valid DNS Security License

Resolved! Static Port Address Translation question

Resolved! PaloAlto Wont Login after turning off and on again in EVE-NG environment

Downloading software upgrade on very slow link

Migrate to PA firewall cause WIFI roaming issue

Upgrade from version 10.2.7-h8 to 10.2.11-h2

IPSec setup with certificate

UNABLE TO PING MANAGEMENT INTERFACE FROM LAN

Site flagged as GRAYWARE Please Help!!

HA State is "not sycned" even though Sync Task is completed on Peer (Passive) Gerät)

Re: User ID agent not starting.

🚀 Join us at Palo Alto Networks Headquarters for Ignite - November 14, 2024 🚀

Re: Sofware Upgrade broken? "An active license is required for this feature"

Re: Cannot see Dynamic IP lists

Recommended PAN-OS version

Unlock your full community experience!

Resolved! Allow wildcard DNS in a Network Address

Resolved! How to view SFP installed on a Panorama or Logcollector

Resolved! Global Protect ( VPN client ) - does not allow print jobs

Resolved! Warning: No Valid DNS Security License

Resolved! Static Port Address Translation question

Resolved! PaloAlto Wont Login after turning off and on again in EVE-NG environment