General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! GotoMeeting with Outbound SSL decryption

Hi all,I'm testing out the SSL forward proxy feature of the PAN and the only issue I have is that gotomeeting doesn't work.I configured it with the guide from the website here and made the two rules one which says don't inspect banking/medical etc. followed by the decrypt all rule. I cant figure out how to tell the PAN to not try and decrypt th...

Resolved! about agentless user-id in panos-5.0

HelloI have a questions about agentless user-id in panos-5.0.I know that cache time of user-ip mapping information is 45 minutes(default) on agent and cache time is 1 hour(default) on FW in PANOS-4.1.Are these time values same in PANOS-5.0?If it is right,Do user ip mapping in MP run instead of agent role in PANOS-4.1? Are MP cache times 45minute...

Could enabling Wildfire possibly cause TCP Transmission errors?

Having Intermittent failures when downloading files on 4.1.11 with Wildfire enabled. I am seeing the following errors in the packet capture, [TCP Previous segment lost] [TCP segment of a reassembled PDU], [TCP Out-of-order] [TCP segment of a reassembled PDU], [TCP Dup ACK 170#1]. When downloading files on a different PAN, with 4.1.7, no wildfi...

HA A/A.. tunnels connecting through fixed IP and not floating IP

Greetings,We have our first tunnel up and running, but it’s connecting on the fixed IP address, not the floating IP. This eliminates the failover capability.Could this be a simple configuration parameter, or a bug?How can I fix this. I havent worked much on A/A so I am not sure how it works

What does PAnel Undefined not registered mean

I get the error Panel Undefined not registered

User usage report enhancements

Based on what I am seeing, there does not seem to be a way where I can limit what users can be reported against. For example, I have a help desk manager that needs to only see his staff. Right now, based on the way the firewall functions, he can see what the president of the company is doing online. Per our company policy, all URLs must be lo...

4.1.13 stable?

I have been running 4.1.12 for some time. For me, this has been a stable release. 4.1.13 has been out since 5/30/2013. I do not see any discussion on 4.1.13 in the forums. Are people generally pleased with 4.1.13? I'm considering upgrading my HA pair of 2050's to 4.1.13.Thank you.

Palo Alto - Sonicwall - Compatibility

Does anyone have any experience setting up VPNs between these two vendors producs? is this question too vague?We're considring getting sonicwall devices for remote offices but Im worried about possible compatability issues. Any feed back would be appreciated.We have a PA-4020thanks

Resolved! Data Filtering document

I was reading up on data filtering and came across this link: https://live.paloaltonetworks.com/message/1350#1350 which points to this document https://live.paloaltonetworks.com/docs/DOC-1048 I tried to access the document but it comes up with unauthorized access, please contact support. I am still digging and would like to get a little more ...

Cisco ASA to PaloAlto VPN conversion

Has anyone developed step by step instructions for migrating site to site VPN's from a Cisco ASA to a PaloAlto 2050?I have approximately 30 VPN's to convert and currently running in VWire mode so all the VPN's will need to be added prior to moving off VWire and eliminating the Cisco.Any help would be appreciated as far as best practices.Thanks i...

Resolved! Virtual Wire

Hello,First post here - looking to get a deep-dive article on virtual wire. I get the general idea, the thing I'm trying to wrap my head around is how the device is able to provide NAT services without L3 services.Thanks!

Create a deny page for a specific set of users

I need to create a deny page for all web traffic for a specific set of users. I have the AD group created and have both the ldap and user-id agent setup. For this specific group when they try to browse the internet they need to get a page that says Per company policy you are not authorized for Internet Access.

ace

where I can order my shirt of paloalto networks

Resolved! Two client account on one PC

HelloEach users have two and four accounts in their office.All account are authenticated by Active-Directoy.Each users use several accounts on one PC at the same time.For example,Mr, A has 'AAA' account and 'aaa' account.He uses 'AAA' account when connect Internet.He uses 'aaa' account when connect office E-Mail.He uses two accounts on one PC(on...

Resolved! Custom report via Panorama using XML-API

Hi,I am trying to create a custom report via Panorama and then retrieving the report data using the XML APIs.I am using the following XML-API URL to create a custom report.https://<Panoram IP>/api/?type=config&action=set&key=<KEY>&xpath=/config/shared/reports/entry[@name='report-1']&element=<type><panorama-tr...

Discussions