General Topics

Discussions

Sorted by:

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Has anyone taken a look at panug.com ?

I stumbled across a site that I think aims to be similar to https://www.cpug.org - sort of the community's independent forum where discussions about Palo Alto can take place. Kind of a neat idea, but I'm not sure how much community momentum it has.

...

Is the pintsized Java exploit that got Apple, Facebook, Twitter identified on the PAN FWs?

I'm wondering if the Java exploit that caused Apple, Facebook, Twitter, Zendesk, etc. to get hacked is something that is identified and blocked by up-to-date Palo Alto Firewalls.

Resolved! Can't download GP client from the portal

We are setting up GP for SSL VPN. For testing purposes , we have created a local db account on the box and setup GB. The portal comes up and when u log in , u never go beyond the login page . It keeps trying to connect and never does . It eventually

...

Certificate for Secure Web GUI creation

Hello

Which attributes shall an external CA certificate have to be accepted as a Secure Web GUI Certificate?

I have imported one, but SSL Management doesn't work with it. These are its attributes:

   Version: 3 (0x2)
        Serial Number:
            15:

...

Best practice for OWA and OMA

I'm getting rid of our old ISA server which we used to expose OWA and OMA and want to use our PA-500 to allow domain users access to OWA and OMA (for their iPads etc).

I've noticed that the application 'Outlook-web' is used for OWA and its dependanc

...

Commit Error (sslvpn)

Hi,

I am recieving the following error when issuing a commit,

Management server failed to send phase 1 abort to client sslvpn

Management server failed to send phase 1 to client useridd

Commit failed

The only change in configuration is adding new local use

...

Resolved! Any idea about 3rd party verisign certificate with GlobalProtect ?

We were using sslvpn with PA 's certificate.Now we bought 3rd party cert. from Verisign and imported it as using server certificate

But Global Protect gives an error as "Protocol Error: Check server sertificate"

I have searched KnowledgePoint but could

...

Inbound SSL Decryption and monitoring

Hello,

I'm trying to setup inbound SSL decryption. It is a pretty basic setup. Two layer 3 interfaces on a PA-500. One interface is in an 'Outside' zone, the other is in a 'DMZ' zone. In the DMZ zone is a web server with a signed SSL certificate. T

...

Cisco IPSEC VPN client connecting to PAN 4.1

Hi folks,

there were no way to establish a ipsec connection between a Cisco VPN client and PAN. I was "inspired" by the globalprotect guide but wasn't enought.

At the cisco vpn client side, I had configured just the ip address, the group and pwd, and n

...

Static route on Management Interface

Hi all,

how can I define an additional static route on the Management Interface?

I have a setup with a customer were the communication from the management interface to two specific IP addresses has to be routed over another next-hop which is not the de

...

Resolved! TAP Mode and IPv6

Hello Everyone,

Is it possible to monitor mirrored IPv6 traffic in TAP mode? I have a PA-500 and it has been enabled for IPv6 firewalling. Apart from checking this option, is there anything else that has to be done to monitor IPv6 traffic? If it is

...

Resolved! External CA Management Certificate

Hello

Is it possible to use an external certificate from our corporate CA for the SSL Management Interface of the firewall?

I have already Imported it, and the corporate root certificate, but I don't know how to change the management interface configur

...

Resolved! Combining policies from different virtual systems

So we are migrating from ASAs to PA 5050's. We are trying to do it with as little interruption as possible so what we did is put the PAs inline behind the ASAs using vwire. Our thought is to build our 4 environments as separate virtual systems in o

...

Resolved! Firewall Configuration Essentials 101 Exam Retake Help

The end of last year I took the Firewall Configuration Essentials 101 v.4.1 exam. I didn't pass so I've spent some time studying and playing with Palo Altos. I returned to retake the exam and it doesn't show up under pending evaluations and I request

...