General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

packets dropped because of failure in tcp reassembly

Hello all,

Here is network diagram as below

Juniper FW(Branch)

|

Internet

|

PalAlto (HA A-P)

|

BackBone - Juniper FW

My customer use IPSec VPN between both Juniper FWs.

PaloAlto active device changed from #1 device to #2 device at last week(Link Fa

...

Resolved! Locked user list

I've been getting this error for a user on our Captive portal:

User 'neoguest' failed authentication. Reason: User is in locked users list From: 172.16.10.100.

I've searched how to unlock the user but I haven't found any info on that.

Can anyone send s

...

VPN & Portal on PA2020 running only Virtual Wires

hi

Our network has 3 separate connectivity to the internet and all of them are connected via virtual wire on our PA2020 and the only other network connection is the management port on a fixed internal IP...

total 7 ports used (3 pairs for the 3 virtu

...

Are the recent Java vulnerabilities protected by vulnerability protection?

Oracle Issues Critical Java Update, Plugging 42 Vulnerabilities

There were a bunch of java updates stopping a number remote exploitations. Do you know if the current vulnerability protection updates already protect against these?

PAN OS 5.0.2 missing route

Did anyone see this situation.

We have PA 3020 running 5.0.2 and a route based vpn to another PA box.

unable to ping the other side of the tunnel or even the other side's tunnel interface IP address.

Weird issue never seen this before.

Anyone see this b

...

LDAP Authentication for Global Protect

I am new to LDAP so I'm looking for some help. I have Global Protect setup to authenticate via LDAP using the following:

base: ou=People,dc=company,dc=com

bind DN: uid=fs01,ou=Special Users,dc=company,dc=com

This works. I've confirmed via the system log

...

Resolved! System log severity change

Hello!

Is there a way to change the severity level of certain system log messages? The PANOS is 4.1.9

The issue we are having is that our customer is "spammed" with e-mail notifications from their HA devices that the signature versions do not match.

Bot

...

Implementing User Identification via AD

Hi everybody,

I'm trying to implement user identification via active directory on PA-200. I've added the AD server under Device -> LDAP and added group mapping under Device -> User Identification.Now I guess I need to install user-ID agent on a local

...

How to restrict a vlan to get only the 360p from youtube?

Hi There,

Our's is a school and students are always watching youtube videos in full HD quality which makes the bandwidth utilization to the peak. We don't want the students to watch youtube in HD but force them to 360p which is comparatively less band

...

Resolved! Is there a way to force the GlobalProtect client to not connect if the client sees certificate shenanigans?

What I mean by the title of this discussion is that when the GlobalProtect client goes to initiate an SSL VPN session, instead of prompting the user to "cancel or continue," can the client respond to the user with something like "Invalid certificate

...

Create Policy based on workstation name and AD group membership?

I'm wondering if there is a way to create a policy based on workstations in a certain AD group.

Here's what I'm trying to accomplish... I want to have a security group in our Active Directory, say "Privileged Workstations" for a name. Any workstat

...

Resolved! Will there be an application entry for VMwares PCOIP?

We are looking at offering remote access using PCOIP, I coded an applicationm for it when I did not find one in the database. Just wondering if it will be added.

Resolved! any way to inject a parameter into a url

Hi

I am trying to resolve the issue with the new google safe search changes that have happened. I am from a school and we are having issues with students being able to search for inappropriate content on google images due to their recent changes of n

...

Resolved! Global Protect does not work

Hello

I'm running the PAN OS 5.0.2.

I'm getting the following error with my GlobalProtect:

(T4364) Error(11792): failed to SetDoc. Message: errors getting GlobalProtect config

Where is my problem?

Here is my config:

<global-protect>

<global-prot

...

Resolved! Has anyone had problems with random VMWare View client drops through the PaloAlto to the View Gateway?

We had issues with random session drops with VMWare View client connections through a View Gateway security server. After we moved from traversing a Palo Alto VirtualWire to the server in a Cisco ASA DMZ to just a straight L3 Palo Alto deployment the

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource