General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

PANOS 4.1 vs 5.0

Which version PANOS is better 4.1 or 5.0

I have installed 4.1.8 on PA-500, should i upgrade to 5.0.2?

How do you set up and configure Global Protect on your PA200

Starting with, Do I need another external IP? How do I configure the portal and gateway. If the IP is 216.96.15.69, for example. The Internal Firewall is 10.10.0.25.

Server error : op command for client dagger timed out

Hi,

Recently when performing a show session all I recieved a response:

Server error : op
command for client dagger timed out

After a few minutes this resolved itself. This was on code 4.1.10. Could this be related to a memory leak and the system didnt h

...

I want my telnet back!

Don't get me wrong, I really like PAN-OS 5, but why did they take my favorite troubleshooting tool away?

The PA is the new device in our environment and if anything is not working all blame on the 'new guy'.

User claims: 'since we have the new firewal

...

PCAP On threats.

Can someone explain why PCAPs on threats would be useful or how to download?

File zeroization error: No such file or directory

Does anyone know what this means? I've never seen this before, but I got a bunch of these errors after committing a change on my passive device. I changed the network interface settings and I just recently upgraded to 4.0.13 from 4.0.11.

Resolved! About M100

Hi all,

How much memory does M100 have ?

(RAM)

thanks.

Resolved! NAT Pool Usage

Hi,

Is there a way to determine the usage levels of NAT pools over a time period. I believe we are running out of addresses in some of our pools and I would like to check what the usage levels are in of pools to see where I have flexibility for change

...

group mapping

When we add a group from Active directory gorup list from Group mapping on Panos to right side of that window; it should come to the policy users tab.But sometimes it does not come for a time.Is there a way to refresh that or what is refresh time fo

...

Resolved! Not able to upload URL database manually to the PaloAlto.

Hi All,

I had downloaded the URL database from the support portal and tried to upload the same to PaloAlto but it is not allowing ( OK option is not getting highlighted).

I did the fallowing:

Upload ->

...

Resolved! Incorrect Username when using Captive Portal # set session processing-cpu dp0???

Greetings,

For a quick background; using PA-500 running version 5.0.1 with the User-ID agent installed for domain users as a stand alone agent on the Domain Controller and captive portal setup for AD users using wireless devices.

I have Captive Portal

...

Resolved! If Vwire is transparent, then why do you have to specify which VLANs are allowed through?

I usually just open up the range of vlans from 1-4094...but why do this is it's meant to be transparent?

Resolved! Captive Portal and User Limit

Hi All; We have seen a limit to the user to IP mapping on a 5000 series for captive portal at 2500 concurrent users, is there a definite maximum? Does the system roll over the last user in when this occurs or is there an error on the 64001st user.

Resolved! Tunnels killing the management plane

Hey All; I was wondering if there was a way to optimize the use of the Management plane to use VPN tunnels more efficiently, when you have more than 150 tunnels the IPSec negotiations take a lot of CPU.

Resolved! Risk Score in ACC

As I drill down through the ACC the risk score tends to stay the same, on the dashboard does the risk change for the time period or pivot when you drill down?