General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Multiple ISPs with inbound connections

I recently bought a PA-500 to replace an aging SonicWall. We have two ISPs, one DSL and one cable. We have static IPs on both. It appears from the documentation that this should work, but implementing it has been painful, to say the least.

Currently w

...

Mobile Device Captive Portal

Hi

Is it possible to get the captive portal logon screen to resize depending on the device? Ideally showing a touch screen friendly version for mobile devices?

Thanks

Tom

Resolved! How to check or modify object Regions content

Hi All,

I want to modify object regions content, because of when i apply it to security rule to deny some source ip address that we want to block ,however it not works.

I want to check what addres lists are in the content of regions, or possible to ad

...

Filter buttons doesn`t show up

Dears,

Im my PA2020, Monitor Tab > traffic I cannot see the filter buttons.... they are there... but looks like the GIF images doesnt show up...

Is that some kind of BUG ?

I have the last 4.1.7 OS installed

thanks in advance!

Resolved! Second IP-Address

Hi everybody,

how is it possible to configure a second ip-address in the same subnet as the first one on the same interface?

i tried to give the interface a second one, but it wasn't committed. also an arp-entry didn't work.

thx in advance

When should I use a non-tunnel mode gateway with GlobalProtect? Also: license needed for HIP? SSL vs. IPSEC?

Just getting started with PA, running software version 4.1.6, and I am learning how to set up a VPN to allow remote users into the protected network. We don't have a GlobalProtect license, but single-portal, single-gateway capability is included in t

...

GlobalProtect general flakiness - anyone else experiencing issues?

We're in the process of labbing out and testing a pair of 5020s running PanOS 4.1. We've configured GlobalProtect per the TechNote guide, and other than one issue where we had to add a static route pointing the VPN address space at the VPN tunnel int

...

Resolved! GlobalProtect configuration problem

Hi,

i have configured GP for remote access, and now i want to test connectivity but the problem is when i try to connect with my web browser on https://<pub_ipaddress> i dont get download site for GP client.

One more interesting thing is that i have pu

...

PAN-EDU 311

Hi colleagues,

I´m just looking for a training (the 311, http://education.paloaltonetworks.com/datasheets/Advanced%20Firewall%20Troubleshooting.pdf ) but i dont find so much places (zero till now) where receive it.

Did you someone got it? Could you rec

...

Resolved! able to block tor browser proxy ?

Hi,

I have block many proxy/anonymiser, like ultrasurf, freegate and many mores.

But i cannot find a way to block TOR browser.

The browser/proxy client is on this site :

https://www.torproject.org/download/download-easy.html.en

Just to let you know that i

...

How to create executive report by LDAP user group?

I have moved from a dedicated URL filter to the Palo Alto with the URL Filter add on. I now need to figure out how to create executive reports based on LDAP groups.

I have LDAP groups such as Sales, Marketing, Accounting. I need to deliever a weekl

...

Resolved! packet capture for unknown-tcp

Hi,

I'm getting a lot of unknown-tcp on the internal network and would like to capture some packets to get an idea what this is.

I tried:

debug dataplane packet-diag set capture trigger application from unknown-tcp to unknown-tcp

but I don't get any pack

...

Negate please

I am running PanOS 4.1.7, migrating from a Checkpoint R75 platform. I have a lot of rules in place, but we are heavy into excpetions. I keep running into situations that would be very easy to handle if I simply had the Negate option.

For example, I

...

Resolved! 4.1.7 LDAP lookup unstable

I have three active directory servers configured within the LDAP settings of my Palo Alto. I have tried using both 389 and the GC port of 3268 as per this doc: https://live.paloaltonetworks.com/docs/DOC-3120

I have two 2050's in an active/passive pai

...

Resolved! Clear Traffic Logs command clears Traffic Summary logs as well?

I want to 'clear traffic logs'. If I go through with that will that also clear the traffic summary logs?

I would like to clear traffic logs but keep the summaries.

... reason being, im upgrading from 4.0.9 to 4.1.7 this weekend and I want to cut down u

...