General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Delete Antivirus Dynamic Update

Hello,I tried threats & antivirus license on a PA 4020.My license was end, so I deleted it using CLI -> works fineBut how to delete antivirus dynamic update package ?? I can't by using web, I tried with CLI : delete anti-virus update (but the pack is not listed).I'm on PANOS 4.1.11Thanks,Franck.

Can PAN device publish client certificates?

I made 5 users into LocalDB, and I configured GlobalProtect Portal & Gateway.It works fine so far.Now I want to generate 5 client certificates for each user and use Client Cert Profile and Local DB as two factor auth. when I connect to GP.My PANOS is 5.0. Is it possible to publish client certs?I could confirm I can configure CA under Device ...

Best 3rd party VPN Client?

Ive got some power users demanding a different VPN client than GlobalProtect.Has anyone setup a 3rd party VPN client (preferrably Windows built-in or something GPL'ed)? Did it 'just work' or did you have to tweek it a bit?I tried windows 7 built in with no luck.Im running PA 4020 on 4.1.7thanks!

Resolved! Master key

Hi,should we change Master key after a new installation for security purposes ?Or not configuring this will cause any security weakness ?

Resolved! Monitor vpn interfaces

Hi,According other discution I know that monitoring for tunnel interfaces through snmp is currently not possible. Would like to know if someone have done something to monitor them through the API ans can agree to share with us ....V.

App History and Old Release Notes

We recently had the issue where something that was working broke. It may have been a case where a new App was added or updated by PAN and some traffic that used to match a more general application (e.g. "ssl" or "web-browsing") now seen as a new application. The new App was not listed as allowed and got blocked. In particular, it's the "intuit-q...

Resolved! How to update database, license through another interface ( not mgt)

Hi allHow to config Palo alto update, retrive license through without connect MGT interface to internet. I want all update, retrive through a another Inteface ( layer 3).PlsTHanks.

Auto update polices to Palo Alto

Hi all!I use Splunk to monitor the system. I use a script to automatically extract the IP from Splunk and want to send it to Palo Alto to block this IP?How do i do it?Thanks

How to avoid looping as PaloAlto will not participate in STP when used in L2 mode?

Hi All,.Kindly help me,How to avoid looping as PaloAlto will not participate in STP when used in L2 mode. Below is the topology.sw1--------------------sw2------------ router| || |Sw3-------------------PaloAlto in L2 mode -------------------client pcNote: PaloAlto has configured in L2 mode not i...

Resolved! Best way to set output in cli to set commands

I am trying to get the configs from the pans in set command. What is the best way to have them display this way and is it possible to have it be this way be default?

Problem exporting logs

Hi everybodyI'm trying to export a traffic monitor log but I always have the same problem. If I try to export a week or a single day I only get about 7-8 hours and a file of 16Mbs with no more than 50000 or 60000 rows. I have modified the "Logging and Reporting Settings" to increase the "Max Rows in CSV Export" to 1 million.My device is a PA-205...

PAN AGENT WITH MULTI-FOREST

Hello,I have Two FOREST A and B, I have a trust relation between this two forest.When I add a user of the forest A in the group (local) of the forest B I can't see in the pan agent the users.Any Idea to see the user of the forest A in the group of the forest B?regards,

LDAP and trusted domains

I use Active Directory groups to control my content filter policies. One of the groups is currently set to Domain Local as it contains a member of one of the trusted domains. I have an agent running in this trusted domain and the PAN appliance can properly detect the username. When I look in AD I can see the membership containing members of b...

Resolved! 378-1833 update and Citrix with IE

Hello,one of our customer has an issue with the last update, it break the access to Citrix 6.5 Server for users with Internet Explorer (8 or 9 same behavior), but no issue with Firefox.They revert the Apps and Threats to 376-1817 update and now it works.The problem seems to be caused by the added Spyware Signature ID 13371 in this update.Are you...

Resolved! Custom Url limit

Hi,How many url can we add max. in a custom url object ?Thanks.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Delete Antivirus Dynamic Update

Can PAN device publish client certificates?