UPDATE 11/8/23 11:43 a.m. EST:
LIVEcommunity’s System Update will be delayed. This means your use of LIVEcommunity will not be impacted this week (11/8-9), and you can proceed with business as usual.
Thank you again for your patience and stay tuned
...
We are excited to announce a new Engineering Blogs section on LIVEcommunity, exclusively curated by Palo Alto Networks engineers!
This dedicated area will be home to technical posts about Palo Alto Networks innovations to build scalable and reliabl
...
Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
Hi all,
I have a very common security rule permitting all traffic in for 80, 8080 and 443 ports, no matter the application
The attached URL security profile denies all url categories except for one (custom).
Now I've noticed not to be able to get the ex
...
Hello All,
I am having issues with video conferencing when using our Polycom VSX7000 which was working fine previously with our Checkpoint Firewall. When we switch over to PA-2020. We start having issues.
We are able to dial out to connect with remote
...
Anyone have any good tricks to organizing an ever-growing list of security policies? We have quite a few especially with inspecting internal to internal traffic. The firewall uses a top down approach to inspection, so I wanted to see if there was a
...
Hi,
is it and when how is it possible to make a difference between a source which is using IE (company-standard) or firefox. I want to deny firefox-traffic.
We use v5.0.3
Cheers Klaus
Good Day Guys and Gals
I need ideas on the following issue please! I have a block on all Social networking sites for the company. The Policy works great when the user tries to access http://plus.google.com, but when they use SSL (https://plus.google.c
...
I know that I can add a second IP to my outside interface by using a /32 instead of /24 like the first one has. My question comes in with routing. My default route shows a 0.0.0.0/0 going out ethernet1/1. Since this interface has 2 IPs what IP doe
...
Hi -
We are using User-ID Agents to create user-to-IP mappings and I've got group mapping configured on the firewall itself and I can browse through my ldap groups. However, when I go to Policies > Security Policy I am unable to select either individ
...
Looking through the white papers and documentation, I didn't really find much as to a recommendation on how to tackle the task of app-id configuration as a whole. Have any of you found any documentation that was helpful in this area? One approach I w
...
Hello all,
I use kerberos auth for Global Protect on PANOS-4.1.x.
Remote users fail auth for GP connection that it appear 'invalid username'.
So I want to collect PCAP on kerberos server and PA device.
I know that PA use mgmt interface for communicated k
...
Hello,
We are using PA3020 in L3 A/P cluster mode. PanOS is release 5.0.2.
We are using static routes to reach our different subnets.
When trying to check a route destination to verify the path using the CLI, nothing is shown as there was no route for
...
Hi,
what is the current "state" with PAN firewalls when it comes to decrypting Dropbox traffic? I found a lot of threads on the forum, some with contradicting information. It was said that Dropbox was put on an internal ssl-exclude list so the firewal
...
Hi,
the last days I did some captures on a PA-2020. At Yesterday I tried again but it doesn't work anymore. Tried via WebGUI and CLI.
If I start the capture it is shown running but no files are created. PAN-OS is 4.1.12.
Does anybody know this issue? C
...
Hello!
Is it possible to configure the PA to read the RADIUS logs in Cisco ACS v5.1? Can the PA map users which have authenticated to a RADIUS server, the external DB being AD?
Hello, Guys.
Thanks always.. I just want to know whether the PAN User-ID Agent 3.1.X can read the security log of the Window 2008 server DC.
I tired to find the document, but It's the grand- father version.. So It's hard to get an information.
Regards,
Ciao,
When should be supported User ID Agent on Windows Server 2012 ?
Regards
reaper
on:
GlobalProtect Android version 13 issue
reaper
on:
Replacing PA-5220 with a PA-3410 and need the best practice to migrate over configuration
aleksandar.asta
aleksandar.asta
reaper
on:
DNS Security cloud query timeout.
reaper
on:
cli "show" match case insensitive and pipe
Raido_Rattameis
