General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Cacti 5.0

Has anyone seen any issues with cacti and 5.0? Ours where all logging usage perfectly until the upgrade it which point they stopped. Now we just get SNMP errors as though the devices are down.

Regards

Dave

paloalto-panorama App-ID missing?

Does anyone else find it strange that there's no 'paloalto-panorama' App-ID? There are paloalto-updates, paloalto-userid-agent and paloalto-wildfire-cloud App-IDs, but not one specifically for Panorama? (ssl on port 3978 essentially)

FQDN not resolved

Hi

On a Palo Alto Firewall, we created an address object using FQDN Type.

We use this object as a destination address in the security rule « TEST-FQDN-1 »

But checking the security policy (show running security-policy) we can see the destination is not

...

Resolved! website slowness with DHCP Cable Modem

I recently installed a PA-200 and many websites are either very slow to load or have to be refreshed multiple times in the browser. Tried multiple browsers so not browser specific. Running a PA-200 with DHCP to Time Warner on the Untrusted interfac

...

Resolved! vsys cpu

Hi,

Can we see how much cpu is used by vsys's ?

Thanks

Resolved! Virtual Systems Shared Gateways

Is it possible to have multiple shared gateways when running virtual systems.

I'm essentially trying to have 1 physical interface, shared among virtual systems, with an IKE gateway configured on it, so I can have multiple IPSec VPN tunnels established

...

Resolved! no nat

hello

i'am configuring a paloalto firwall wish is the backward firewall,

i'm facing problem with nat , users must be integrated in the frontal firewall

users passes by paloalto firewall first then the frontal firewall, when it pass by pan their

...

RPC Service

hello everybody,

I need to write a rule that allows RPC Service activity for SUN SNMP to DMI mapper daemon.

any idea?

thanks in advance.

Resolved! no certificates in the webui but still everything is working

we get the error:

Warning: cannot find complete certficate chain for certificate ****

we get this error since upgraded, i cannot see any certificate in the webui but everything (global protect and webui) is working.

int the export xml i can see those c

...

Permit related/inherited applications

Hello,

I am looking to build a particular security policy where *all* web browsing is permitted, including any applications that the session gets transitioned to as a a result of App-ID figuring it out. For example, a session may start out as a "web-

...

Resolved! Timeout for SSL Decryption Session

Hopefully an easy one, but I can;t seem to find the answer.

What is the default timeout for SSL decryption i.e. how long before a user is required to re-accept an opt-out page?

And, what is the CLI command to change this?

Many Thanks

GlobalProtect 1.2.4 issue with Mac pre-OSX 10.8

We are having a strange issue with GlobalProtect and all Mac OSX that predate 10.8. Clients can connect just fine, but when they try to connect to our NAS, the client's connection to the NAS locks up and then gets terminated, but the GlobalProtect c

...

Redundant Site-to-Site VPNs?

I am looking to put in redundant or active/active VPNs.

2 of our sites both have 2 ISPs.

Currently the VPN works from 1 ISP on each side.

Questions:

1. Can I have redundant VPNs?

2. Can I load share over those?

3. Any tips or docs to configure?

Other relate

...

Resolved! HA configuration & License Expired

Hi,

Given a scenario when both HA configured firewalls' license have expired, will my active firewall still fails over to passive firewall in the event of primary firewall failure?

thanks,

cwong.

Resolved! GlobalProtect Client Startup

After installing the Global Protect Client on our Windows 7 laptops, every time our users start their machines once they login to our network on the LAN the Global Protect Client pops up and wants to connect. Is there a way to supress that popup when

...