General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Is there any limitation for the number of the custom signature ?

Hello, Guys

Thank you first.

My customer want to know whether there is any limitation for the number of the custom signature.

Customer wants to make about 50 custom app , for the app-id. And if there is any limitation. There might be serious problem.

Ha

...

how to clear TCP options using Palo Alto firewalls?

At the moment we are replacing our Cisco ASA firewalls with Palo Alto firewalls and one thing we cannot still figure out is how to make the Palo Alto firewalls to clear the TCP options on TCP sessions. This can be done, in Cisco ASA firewalls, using

...

Resolved! L2 "switch" ports?

Hi All,

Am I right in saying if I configure a selection of interfaces (in this case on a 3020) as L2, and then assign them to a VLAN with a L3 VLAN interface all those ports will sort-of act like a switch (or more likely a hub)?

A bit like the handful

...

Resolved! minimum PanOS version for UserID version

PanOS release notes call out the minimum User ID agent version supported. UserID agent release notes do not call out a minimum PanOS version. Is there any issue in getting ahead on the UserID agent version? For example, we have several devices runnin

...

Resolved! Any way to upload a .CSV or other file with list of IP addresses?

We have a large spreadsheet of random IP addresses that we need to block. Is there any way to upload/import a file to automatically create the address objects & address group required? I have several thousand IP's...

I'm running 2050's with 5.0.4.

Resolved! block files with multiple level of compression

I want to block all kind of compressed files with more than the support 2 levels of compressions. Is this possible?

Resolved! All sites registering as "unknown"

Came in today with users screaming that they were getting blocked on all websites. Finally extracted enough information from them that the category was coming up as “unknown” for all sites…even Google. Decided it had to be an issue in the URL filte

...

PBF rule

Hi,

Could you please help me with the below query.

What exactly it happens when I enable "Disable this rule if nexthop/monitor ip is unreachable" in the PBF rule - > Forwarding Tab - > Monitor Check Box.

Suppose , if the Monitored IP is not reachable ,

...

Upgrade to 5.x - the good, the bad, the ugly?

OK, one for you guys who have upgraded to the 5.x stream.

Ignoring the steady furore over the UserID agent and CPU issues, what are the advantages/disadvantages of upgrading from 4.1.x to 5.0.x?

I have a single HA pair, no Panorama, no Wildfire subscri

...

PA 2000 platforms rebooting in our network

We have deployed around 10 pairs of PA 2000 platforms in different networks within our environment.

These networks almost generate the same type of traffic. What we experience is that, these firewalls which ever is active, goes in for an automatic reb

...

User-ID on-box Best Practice

Hi,

Can anyone clarify for me what the best practice recommendations are for the User-ID agent? Prior to V5 it was clear that they should ideally run on the domain controllers or servers close to them. However with the option of running on-box, is t

...

Shrew Soft VPN (XAuth) connected but no traffic

I can connect successfuly thru the Shrew Soft VPN but I cannot get access to the internet.

I tried both "Obtain Topology Automatically or Tunnel All" and setting manually Remote Network Resource 0.0.0.0/0 but neither one worked.

Any ideas?

Resolved! multiple interfaces in a Zone

All

I only setup Vwire and Zone, Each zone has one interface. we have a few (5)zones. For example

zone1=interface1

zone2=interface2, etc

so user started ftp session, it will pass two zones Z1-Z2--->Z3-Z4---->ftp.sample.com, so we see two sessions for sa

...

Resolved! Management CPU is 100%

Hi Guys,

We are having an issue with the Palo Alto 2050 running OS 5.0.2. Earlier it happens when we do a commit or generating some reports. Then we cleared the all logs and update to 5.0.2 and now the Management CPU is always 100% even though we didn

...

tunnel interface in PBF rule

Hi,

Can anyone please help to resolve a small issues.

1) Can we use tunnel interface in PBF rule if yes please provide a sample configuration.

2) I have 2 ISP's terminated on my PA firewall, i require a failover to 2nd ISP if my Primary ISP is down by m

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

Is there any limitation for the number of the custom signature ?