General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! any way to inject a parameter into a url

Hi I am trying to resolve the issue with the new google safe search changes that have happened. I am from a school and we are having issues with students being able to search for inappropriate content on google images due to their recent changes of not forcing strict safe search on. Previously we have used the work arounds that are on articles 1...

Resolved! Global Protect does not work

HelloI'm running the PAN OS 5.0.2.I'm getting the following error with my GlobalProtect:(T4364) Error(11792): failed to SetDoc. Message: errors getting GlobalProtect configWhere is my problem?Here is my config:<global-protect> <global-protect-gateway> <entry name="GPG_xxx"> <roles> ...

Resolved! Has anyone had problems with random VMWare View client drops through the PaloAlto to the View Gateway?

We had issues with random session drops with VMWare View client connections through a View Gateway security server. After we moved from traversing a Palo Alto VirtualWire to the server in a Cisco ASA DMZ to just a straight L3 Palo Alto deployment the problem went away. We even had the drops with App-ID override but fewer.Now though with the 356-...

Resolved! Possible to forward GlobalProtect HIP data to RADIUS server?

I would like to be able to forward certain information about the client (mainly MAC address and hostname) to my RADIUS server for use in authentication. Is this possible with the PaloAlto firewall? I've been digging through the docs for about a day but I'm not seeing any way to do it.

Sending email alerts when thresholds are violated for data filtering

Is there a way on the PAN firewalls to send email alerts when thresholds are violated for data filtering? If SSNs are now going out of my network, is there a way to trigger emails to better alert me to the issue rather than continually refreshing the log files? I can get alerts via email for other areas. Maybe I am missing something

QA new release

Hi,Anybody having much issues with latest release on 4.1.11 and 5.0.2,3,4?I think quality assurance should be increased. As we have a lot issues with those new releases.=> user id taking 100% mgmt on 4 and 5 releases.=> connection to user-id agents flapping=> custom url blocking page cause client browser to freeze=> app override caus...

Resolved! Streaming video server disconnecting every 30 seconds

Hi folks.I'm tearing my hair out with this one, so I'm hoping that someone can point me in the right direction.We have an installation of the Unreal Streaming Media server running in our DMZ off our Palo Alto firewall. This server is used as a central access point for both receiving and distributing streamed audio and video for business purposes...

Resolved! is qos marking in security policies automatically applied bidirectionaly?

e.g If there is a security policy applied from just "untrust to trust" permitting Citrix traffic and giving it DSCP marking of AF4x .. will the return traffic from the connection that is flowing back from "trust to untrust" have the same AF4x DSCP marking automatically applied when it exits the untrust interface? or does that require another ex...

Resolved! Asking about upgrade PANOS from 4.1 to 5.0.4 !!

I have Project with PAN 5020. After deploing Appliance to Customer site, they need me to make a test call UAT ( User Acceptance Test ) using Palo Alto.But when i working with UAT, i need using PANOS 5.0.4 , but the PANOS included in Appliance with PAN 5020 is 4.1 I have download 5.0.0 and 5.0.4, but i still can't update PANOS. The device alert...

Resolved! PANOS 5.0

PAN seems tho have quietly released PAOS 5.0 a few days ago. Some nice new features in the release notes, but nothing beats real world feedback.5.If you are already running it, what enhancements do you value most ? What issues do you experience ?

Resolved! configuration help-vwire subinterfaces with different policies per vlans

Hi all,Its my first post here so I hope someone can answer my question regarding vwire subinterfaces.As I was looking through the older topics the thing I want to achieve is similar to this.https://live.paloaltonetworks.com/message/9679#9679however I want to use vwire subinterfaces instead of L2.According to course material it can be done.Basicl...

Resolved! PA 5000 series grounding?

The PA 5000 series hardware reference guide does not show anything about the grounding lug that is present on the PA-5020 AC power firewalls. Is the grounding information the same as the PA-3000 series? 14 AWG, certified Lug crimpted, using a size #8-32 nut and star washer (supplied), torqued to 15 in.-lbs (not overtightened)?

Resolved! x-forwarded-for header parsing.

With the command "set system setting ctd x-forwarded-for yes" the x-forwarded-for header is parsed to populate the source.user field in the logs.However, which exact header is actually being parsed with this command?Is it "x-forwarded-for" ? ( according to the CLI guide)Or is it "x-fwd-for" ? (according to the KB article)or both ?Can it be chan...

Adding Threat Exceptions

Hi, I wonder if somebody can help me with a query?I am running a 2050 as my firewall (I am new to looking after Palo Altos!). I have colleagues building workstations at another site coming across a VPN to access resources at my site. The router and links are working fine. One particular application is not getting through and is being blocked...

OID of the CPU and memory of PA-2050

Hi All,I have an OP manager (network monitoring tool). I want to integrate it with Palo Alto. Does anyone have the OID for the CPU and OID for the memory of PA-2050? Regards,Eugene

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!