General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

API call to clone multiple URL Filtering categories

Hi,

I am trying to clone 2 URL Filtering Profiles "testProfile1" and "testProfile2" into "testProfile1-1" and "testProfile2-1" using the following REST API call.

https://HOST_IP_ADDRESS/api/?key=LUFRPT1mQUJoTjh4S05rbkpBcWtLb2pZRERJekJTcDA9U2F1cU8ybzFza

...

Resolved! Problems with xauth and iphone vpn

Hi,

I have a iphone (ios 7) what i am trying to connect to our global connect vpn setup.

Android have the same problem, and computers using the global connect client is working fine.

This worked fine some time ago, but now I am not able to pass any traf

...

Resolved! Blocking Google Images Content

Hi,

We have blocked Sex, and Nudity in the Category section.
And that works fine for all the users on our PAN 4.x

But when the users go to google.com, and search for sex,
they can still view unwanted content in the "Images" table of google.com

How can I s

...

PA-200 with DHCP assigned Internet IP and GlobalProtect using self signed certs

Hello everyone, trying to find a how-to or config guide on how to configure PA-200 that has 2 interfaces configured, eth1/1 and eth1/2 runnin PANOS v5.0.8, downloaded and activated 1.2.7 GP client on the PA-200.

eth1/1 is in untrust zone and setup wi

...

VM-100 L3 subinterface responding issue

Hello All,

almost a year I have production VM-100 deployed on 5.1 ESXi infrastructure. One interface is divided to 2 subinterfaces and configured like L3 with one virtual router. Policies was deployed and everything working fine until users complain t

...

Resolved! Upgrading from 4.1.6 to 5.0.0

Hi,

i have several bug in my actual version 4.1.6. Yestedary my Pa rebooted suddenly because this bug "this was the last error 'infra-group: restarts exhausted, rebooting system'"

So i would like to upgrade my device.Can i pass from 4.1.6 to 5.0.0 dire

...

Custom report on certain file types?

Hi there,

I want to be able to do a custom report showing me who has been downloading certain file types (avi for instance) on my network. Or at least, how I would be able to interrogate the data filtering logs to be able to show me this?

The file type

...

Global Protect - OS X 10.9 Mavericks

Has anyone had any issues with Global Protect and 10.9 Mavericks when trying to access SMB shared drives?

If you have, have you found a solution or work around?

Thank you

Allow specific URL from being processed by data filter

Is this possible?

Online Cloud Storage

Hi,

I want to put together a policy to manage our user's access to online storage. We would like to restrict access to all but a few storage companies (DropBox, Hightail) and wondered how others manage such a task.

Also, I'd like to accurately pull a

...

Resolved! Enabling Jumbo Frames

Enabled jumbo frames at Device, Setup, Session. Question is, do I still have to go to each interface and specify the MTU size per interface or is the default value what I set at the device level? Basically, if I don't touch the interfaces what MT

...

Why pdf file action is forward on wildfire?

Hello.

I am seeing data-filtering logs for wildfire and have found some logs.

It is pdf file log that action is forward.

Wildfire configuration is any application and action forward.

But PDF is not PE file.

I don't understand Why pdf file action is forwar

...

Resolved! PA-500 - Error: Number of profiles (4294967292) exceeds vsys capacity (50)

I've inherited the management of a PA-500 that was previously linked to a Panorama server.

When I try to commit I receive the following error

VSYS1

Error: Number of profiles (4294967292) exceeds vsys capacity (50)

(Module: device)

Commit failed

I've l

...

Resolved! Configuring CRLs

All,
I am using a microsoft CA to issue machine certificates for global protect authentication. All is working, but the downloading of my internal CRL. Is there something I need to configure besides checking the "User CRL" option in my certificate p

...

Using client certificates with an authentication sequence for Global Protect

Hello,

Is it possible to use client certificates for both AD and local users for global protect? I have a working authentication sequence, but have a requirement to use client certs. If it is possible, would it be better to generate the certificates

...

Discussions

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

API call to clone multiple URL Filtering categories