General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

SFTP Timeout

We are experiencing a timeout across SFTP; while SSH seems to be set to timeout at 120 hours, SFTP transfers are timing out at the 1 hour marker.Is this an expected result? And if so, can we adjust the timeout for SFTP specifically?Thank you.

Resolved! Software Upgrade

Hi Everyone - I have a 4050 HA pair (4.0.12), 2050 HA pair (5.0.1) and several 500's (5.0.3). I am looking to upgrade the software on all firewalls but have had issues (typically high CPU and memory issues) with all these versions of code. Can you recommended a stable version of code? Does anyone have a similar set up (with the HA clusters) a...

ROUTING INTER VSYS

Hello ,I need to route users between more than 2 VSYS. do you know if it's possible to route packet between more than 2 VSYS. PACKET IN-> VSYS1 -> VSYS2->VSYS3-> out. What is the limitation for the routing inter VSYSthks for your help!ALex

User-ID Agent not reconnecting after network outage?

We had a strange issue today.We had a network outage which basically meant that all our DCs that run the User-ID agent were still running, and our PAN was still running, but there was no LAN between the DCs and the management interface on the PAN.The outage was several hours (it's been a "fun" day).Once the network was back, nobody could get to ...

Resolved! Proxy-Arp behavior and NAT's

Hi All,This problem is a little confusing to explain but I will do my best to lay this out. Keep in mind I have changed the IP addresses to keep examples simple.I have a Palo Alto 2020 with a basic configuration. One internet connection and One LAN network behind it.The firewall has a public IP address of 5.5.5.2/24 with a default route pointi...

Resolved! Can't logon to web interface after 6.0 upgrade

Hi All,Anybody having toruble logging on to the web interface after upgrade to PAN OS 6.0.I can visit the web interface and then type my UN and PWD that seem to be accepted but then I am redirected to the login screen again after clicking submit.If I type them incorrectly I receive a prompt saying so.Thanks,Jaggie

Scheduled Log Export doesn't accept new SSH host key

Hi everyone,today I reinstalled our syslog server which we use to archive the traffic logs of our PA-3020s (amongst some other things) and didn't import the old server's ssh host keys.After updating the configuration for the Scheduled Log Export in the GUI I clicked the "Test SCP Server Connection" button and got the following message:Even thoug...

Resolved! EOL Dates

Official product EOL and EOS dates are these posted somewhere?

Palo Alto Scan Clients for Antivirus

Hello, I have a quick question regarding the capabilities of the Palo Alto's. In this scenario, we want to be able to deny computers who connect via SSL VPN (GlobalProtect) access to the network if they do not have antivirus on their machines. Can Palo Alto do this? If so, can you direct me to the procedures of how to set this up?Thanks,Mark

Reports - strange behavior (source host name)

HelloLast time I spent a lot of time to customize reports under my requirements.I realized some strange for me behaviour in custom reports. If the IP has an entry in Policies >Addressses is presented in report with the name from Policies >> Addresses instead of name from DNS. This happend when You have started this report by hand (doesn...

VPN tunnels on a ubiquiti wireless connection

I have been able to create a vpn tunnel between a PA 3020 and an Cisco ASA 5505, but I am having issues getting a tunnel to come up on a ubiquiti wireless connection. I have checked and the wireless is working fine, it worked before I replaced my cisco asa 5510. Any idea what to check would be helpfull

Captive Portal and RADIUS Authentication

Hello, Is it possible for Captive Portal to work with RADIUS or AD authentication in a way that if the user logs into their PC and authenticates via AD that they will not have to authenticate a second time via captive portal? Or, does captive portal have to be opened via a web browser to authenticate?Thanks,Mark

Captive Portal Response Page

Hello, Is it possible for the response pages to be hosted externally on a web server or do they have to be hosted from the Palo Alto?

Resolved! PAN OS 5.1.x branches - for whom they are?

HelloLast time when I reported issue I see on selection list that branches 5.1.x of PAN OS's I can download 6.0.0 and every from 5.0 but I can't see 5.1.x on Device > Software of my PA200 device.Could someone tell me something more about 5.1.x PAN OS?RegardsSlawek

ICMP and other services in the same rule

Hi everybody, Is it possible allow icmp and other services in the same rule? for example allow icmp and tcp_25 between server A and server B but in the same rule and How do that?

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!