General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Configure Firewall different speed firewall interface

HiCan configure Palo Alto Firewall with 10 gig trust and 1 gig untrust.My untrust internet speed is 50 MB only.Is there any compatible issue other than throughput bottleneck.ThanksShabeer

Resolved! GlobalProtect and logon scripts

Hello. Is it possible to launch a logon script to map drives after connecting with GlobalProtect in on-demand mode? I know we could create a script to launch manually after a connection to map the drives but would like an automated method.Thanks!

PA Platform Upgrade/Migration

We are about to upgrade from two PA-500s (in HA) to two PA-3020s (will be in HA as well). Is the process as simple as exporting the configs from the PA-200 and importing them into the PA-3020s? Will there be a lot of tweaking needed because the 3020s come with dedicated HA ports and the 500s don't. I couldn't find any good documentation or posts...

Resolved! No way to view sites that are set to "Allow"?

Is there a way to view sites that are set to "Allow" or are in the "Allow list"? I can see the "Allow list" sites via the Application Command Center, but is there any way to view them in the "Monitor" tab or through reporting?

Resolved! Interface Settings at VM-Series

Cannot set any network interface advanced setting at a VM-series (VM300):the fields are gray out... why?

AET & PAN

Hi everybody,last week I had a Stonesoft engineer in my lab demonstrating their techniques of exploit attack via AET. I tested my PAN NFR units (PA-200 & PA-2050) with IPS license last update, together with other vendors IPS units, protecting 2 pretty vulnerable client (one win xp sp2 the other ubuntu 6.04) .The result scared my quite a bit....

Resolved! Aggregate Interface Failover

Hello, Is it possible to have two interfaces configured as aggregate interfaces in one AE group in way that if one interface goes down it does not force a failover to the backup firewall? Here's some background...I have two PAs set up with high availability. I have configured e1/1 and e1/2 as aggregate interfaces joined to the aggregate group ae...

PA3050 Install

Install of a PA3050 from Cisco ASA. Getting data transfer errors and mail in a degraded state. Some mail is getting deferred from the mx servers. Some tcp syns are not being acknowledged correctly. Anyone see these same type of issues after a PAN 3050 install. Nat in place for external mail servers.Thanks,

Layer-3 Active/Active mode with ARP load-sharing

Hi AllI'm just wondering, if I'm using layer-3 sub-interfaces in active/active mode, is it possible to create ARP load-sharing for each sub-interface on both PA.by EX: sub-interface 1.102 with IP address 192.168.102.2 on PA-1 and 192.168.102.3 on PA-2 ARP IP 192.168.102.1sub-interface 1.110 with IP address 192.168.110.2 on PA-1 and 192.168.110....

Resolved! Do HA peer firewalls go against Panorama device count?

Can someone tell me if an HA peer firewall is considered an additional device in Panorama? Does is go against the device count of the Panorama license?Kind regards,Jeff

Resolved! Antivirus Profile Issue

Hi Gents,I installed Palo Alto between clients and my server farm in VWire Active/Active mode.I created a policy for user access to the file server, and when I apply the antivirus profile to the policy the share accidentally hangs from time to time.the share size is a round 2 TB.how can I resolve that Issue, and by the way I created the antiviru...

Resolved! Active/Active HA in VWire Mode

Hi Gents,I'm just wandering if the Floating IP or ARP load-sharing configuration are required in vwire mode. or they are only required in layer-3 mode.all of the documentation I've read about that aren't clear enough.Regards,Maher

How to know object name of OID on PAN

I have an alert system to monitor performance all of device in my system, include my PAN.I can add all of each oid on the PAN, but I can not know the correspond name of each oid.Example : OID 11.3.6.1.2.1.2.2.1.10.1 is "ifInOctets"I have so many oid key: .iso.3.6.1.2.1.2.2.1.12.6; ..... many oid .I want to know name of each oid.Please help me ho...

Resolved! IPSec tunnel, delayed status update

I had one of our remote sites go offline two days ago due to an ISP outage. However, the site to site link showed as up for several hours before it finally dropped and showed as offline. IS there a setting to have this respond faster so it shows offline within minutes? Or is this working as designed?

QoS Bandwidth Per User

I would like to be able to limit our users to a certain amount of bandwidth at a time. I know I can do this for individual IPs, however is there a way with QoS to basically say, don't allow each individual IP on the network any more than 25Mbps or something along those lines?As it is now, I am having to setup DHCP reservations when I find a stu...