General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Thank You for Filling Out the LIVEcommunity Experience Survey!

If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users. 

 

In the past six

...

survey-livecommunity.png
jforsythe by Community Team Member
  • 14508 Views
  • 1 replies
  • 4 Likes

Userid timeout - renew action

How can a user trigger/renew UserID? Is there some action a user can take on the PC that would trigger UserID renewal.

 

Rebooting is one way and has resolved this couple of times I was reported this issue. I think logoff and Log on should also work. O

...

raji_toor by L4 Transporter
  • 620 Views
  • 1 replies
  • 0 Likes

Connect to globalprotect vpn using verizon mifi

Can you use a verizon mifi to connect to a globalprotect vpn tunnel? This is so they don't have to install the gp client on their pc. We do not have licensing for gp to be used on phones and to me a mifi is kind of a glorified phone. 

jdprovine by L4 Transporter
  • 1290 Views
  • 4 replies
  • 0 Likes

GP 5.2.5 Error authentication check failed

Hi Team,

 

We have GP 5.2.5 on PAN OS 9.1.7

Connection method is pre logon then on demand.

on GP Gui logs i see error  Error authentication check failed  for  ( eventid eq gateway-hip-check )

 

Even though we do not have hip check enabled on the GP.

Is this

...

Resolved! log at session end?

I have around 500 policies having 'log at session end' enabled and 'log at session start' disabled. I know Palo recommends logging at session end only but I also have a concern that for eg. a malicious file export that lasts for 8 hours and 10gigs go

...

Resolved! IPv6 dual stack configurations.

Hello,

 

I want to achieve IPv6 dual stack configuration on PA-850.

 

What are the requirements for this type of configuration? 

 

For IPv4 traffic will hit to our IPv4 configured wan IP and for IPv6 traffic will hit to IPv6 configured wan IP.

 

Please enlig

...

Url filtering

When user asks for providing full access what categories needed to b allowed & Blocked in URL filtering ?

KashifSh by L1 Bithead
  • 1063 Views
  • 4 replies
  • 0 Likes

DP 100%

Hi Team,

 

We came across a situation that our DP had just gone high at a time point till 100%. I checked with the system files and found some crashes have attached the screenshot for your reference.

 

Also all the software status where running which i c

...

Device Config or Full Config

Hello ,

 

I need duplicate FW config...

 

What is your suggestion?

 

Should I import the full configuration file or the device state file?

 

What is the difference of upload full configuration file or the device state?

 

Regards

Alpalo by L3 Networker
  • 852 Views
  • 3 replies
  • 0 Likes

Configure Secondary ILL ISP

Hey, Guys, one of my customers wants to configure a secondary ISP he change his ISP and Now want to configure the NEW 

ILL(Internet Leased Line) ISP. to the same interface. I configure the Virtual route, NAT and added new ISP Ip but was not able to UP

...

Resolved! Invalid TACACS Logins from Outside

Just setup TACACS authentication using Cisco ISE as our TACACS server.  We can successfully login with our AD accounts, but when I look in the TACACS logs on ISE, I see a ton of "INVALID" attempts from external IPs.  Is the normal/expected?  Is there

...

Resolved! Log message

Hello there,

 I had received several log message " XDR service cyserver was stopped on Desktopxxx" although this devices have running cortex agent. What are the scenarios that this log message are generated and what are the cases that the cortex agent

...

Top Liked Authors