General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! interesting PPPoE Problem

Hi guys,

i am currently tasked to replace two firewalls we have in the company. The first is a small cisco ASA 5505 for client breakout and a MS TMG(yeah i hate,too) for publishing the Servers.

For the first step I am trying to replace the ASA. WAN con

...

Resolved! GMAIL Base and SMTP - WTF??

Folks.

The latest content update (pushed today, my time) gave me the following warning in the task when I installed it

VSYS1: Rule 'Outbound_Traffic' application dependency warning: Application 'gmail-base' requires 'smtp' to be allowed, but 'smtp' is

...

Invalid threat ID number, next steps

In the threat logs, the PAN is detecting a virus for internal traffic, server to client, but the threat id doesn't match anything in the threat vault, 1 number too short, 253879. What's the best way to identify if the threat is legitimate, not a fals

...

Same traffic traverses the firewall twice.

I will try to draw this out the best I can and then ask my question.

Remote Site (zone is trust, vrouter2, tunnel.1) <<>> Core network (zone is trust, Interface 1/10, vrouter2, layer3)

Rule for this is any, any in both directions.

The above is how all

...

Resolved! GlobalProtect Portal konfig update on Windows

Is there a way to force an update of the GlobalProtect configuration on a windows agent?

I`m testing different configurations but the client would update the config, probably because of the "Config Refresh Interval (hours)"

Regards

Kristian

iMac updates and traffic monitoring

I have permitted apple-updates and users have confirmed that they are able to perform their updates. However, a user in is unable to perform updates as it appears that he is being blocked.

All our firewall and filtering is carried out by PAN and I am

...

Resolved! Threat search by name

Hi,

If i have just threat name (eg.: Suspicious Content Found in 404 Page). How i can find this threat in a threat log? Is any search by name? Or i need to look all log by my self?

Subtype "4" in Traffic log

PAN OS 5.0.0 on VMWare

I see a lot of subtype "4" in my traffic log. I also see start, end, deny, drop, so I'm sure it's not just a display error meaning one of the listed.

Does anyone know what "4" means?

Thanks

Andre

telnet with EBCDIC encoding

We are having some issues with IBM telnet (tn3270) through a PA-200. The telnet sessions are very sluggish. I had to remove the firewall to restore performance. The telnet is using EBCDIC encoding. I had been specifying a security policy using th

...

Resolved! Access Management page on any interfaces

Dear All.

Iam asking if there is a way to access the management page on another interface with Vwire.

Resolved! Disabling warning messages during commit

Hi,

I get a lot of warning messages during commit, regarding rules shadowing, application dependency, etc.
I've been looking for a way to disable some or all of the warning messages, but with no luck.
Anyone know if it is even possible?

Resolved! logs on PA-2050

Hello everyone ,

I have recently implement pa-2050 at a customer premises. Nine days after the implementation each time when login on the web interface a system alarm just popup saying '' Database traffic exceeds percentage limited '' . Have a questi

...

Resolved! Security Policy Rule matches on ALL URL categories

Hi,

I'm sure this was working at some stage but now it's not working the way I need it: I have a rule from inside to outside, any user, web-browsing and a URL category of gambling, allow the traffic and use log forwarding with no profiles selected.

The

...

Not showing dynamic updates for global protect data file even we have licens global protect licens,.

Hi All,

In PA 2050 with PANOS: 5.0.0 not showing dynamic updates for global protect data file even we have global protect license.. Showing nothing, Kindly do the needful as we need to configure HIP profile for SSL connection.

Thank you,

Gururaj

QoS (bandwidth) VPN site-to-site tunnel?

Hi all,

I am trying to understand the QoS feature of the PAN-2020 and was wondering if I could get some assistance. We have a VPN site-to-site tunnel and the data center we are tunneling to is a 10 Mbps connection we can burst up to (10 Mbps being th

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help