General Topics

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! DNS proxy policy

when you create a dns Proxy policy you declare only the ingress interface

or egress interface ?

Resolved! group member attribute

when you create a ldap profile by default

the group member attribute is defined to member

my question is

member for palo does mean "memberOf" for Ldap group attribute.

and in this way each autentication request is answer with all users nested groups

...

https coaching page - Connexion reset depend of browser

Hi all,

Configure a continue action on certain url category. If request in made in http no issue. If request is made in https, depend of your browser, I have

- Chrome V27.0.1453.110 m => erroe page with connexion reset

- FireFox V21 => erroe page with

...

client cert invalid message when connecting global protect with client cert

Hello

I had tested to connect global protect with client cert successful in my lab.(PANOS-5.0.x)

I am installing global protect on my custom device.(PANOS-5.0.x)

But I don't connect with 'client cert invalid' message.

I had installed the following in my

...

IPsec X-Auth with RSA On-Demand Tokens

Hi, I have PAN working with RSA On-Demand tokencodes (these are SMS-based tokens) when using GlobalProtect and the management UI but cannot get it to work with IPsec X-Auth. RSA On-Demand tokens work like this:

1) User enters their username and PIN to

...

how can we get receive time in Panorama URL Log

Dears,

We are trying to get the URL Log report with time , but we cant find receive time in available columns.

Please help us regarding this

Resolved! URL-Filtering: Use profiles or specify categories in rules?

Hi,

there are two ways to select which URL categories should be allowed/blocked: You can either create a URL-Filtering profile and attach it to firewall rules, or you can specify URL-categories directly in the firewall rule (destination).

Specifying U

...

Resolved! Layer7 Filtering - Bad Bots

Hi all,

I'm new to PAN OS and working on a project to migrate from a Cisco ASA to a PA 5020.

With the migration I need to bring over a policy that drops http traffic with a user-agent header matching on a regx.

I've created a custom vulnerability (see a

...

Resolved! i'd like to show the disk usage on the M-100(Panorama Appliance).

Hello there.

I have a M-100(Panorama Appliance) and I'd like to know command line to check the disk usage of a M-100(Panorama Appliance).

If i use a command line on the PA-5060, i can see the current disk usage like below.

command line : show system l

...

Resolved! cacti graphs

Hi,

I configured to use snmpv2 with cacti

I found it's document on community but getting graphs empty.

Aslo active sessions always -1

HA base on VM 100

I try to find information about HA on VM-100

some restriction exist or not with Active activ mode or active/passive mode

or it is recomended to use the Hypervisor High availability foncionality ?

Resolved! Can a pa200 be configured for shutdown via ups

Ive confighred APC network shutdown on my windows servers but im not sure if i can do the same for the firewalls.

I did something similar with my checkpoin firewalls from expert mode, but i used the redhat varient of the ups software which is what che

...

Can I count the number of An-virus signature in my PAN device?

Hello, Guys.

Thanks ahead first.

Out customer want to know how many anti-virus signatures are enabled in their PAN Device. I've heard that there's no CLI command or information about this. Before I give my answer to the customer, I want to double-check

...

Setting Up PPPoE

Hi All,

Having a little trouble in setting up a PPPoE connection.

Does anyone have a working config they are able to share with me as to how the Virtual Router is configured, the L3 interfaces etc as well as the outbound and inbound NAT'ing as this IP

...

Resolved! Certificates troubleshooting

Hi! we are trying to implement a SSL VPN connection through Global Protect using certificates from our own CA. We imported the root, intermediate and server certificate, but after configuring the portal we see an warning after commit: " cannot find c

...

Discussions

Ensuring a Safe and Secure Community: How You Can Help