General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Wildfire questions

Ran a very quick and dirty test with Wildfire using a few malicious files I could find online. 2 out of 8 of these were judged "benign" by Wildfire (the 2 that were missed were very similar, so 1 out of 7 may be more accurate). Anyway, I know that nothing like this is going to be perfect, so I'm not complaining about the false negatives.Question...

Resolved! What is the sysOID for PA5050/5060 used to distinguish different models

The following is assigned for the PA4020 & PA40504050: 1.3.6.1.4.1.25461.2.3.14020: 1.3.6.1.4.1.25461.2.3.2

Resolved! NAT to multiple https sites

It is possible to NAT to multiple internal https sites behind a single external IP address? If so any guidance on how to create the NAT policy would be most apprecaited.

PA-500 dual internet connections

Hello all,First post here!!I have a PA-500 that I'm trying to add a second internet connection to and I'm running into an issue. The goal here is to keep the primary line (a bonded T1 solution) for corperate traffic such as VPN tunnels, remote connectivity, SIP phones, mail delivery and then add the second line (a standard cable line) for genera...

Resolved! Block DMZ specific URL

Hi dear,I wanted to block from Internet a specific URL on our publicwebserver that located on our DMZ:We have a webserver on our DMZ example (https://toto.ourcompany.com) so we havea policy that allow from Internet to access this webserver by SSL, what I wantto do is to block only for example (https://toto.ourcompany.com/Web/login.html).I did a ...

Resolved! reserved address

Hi AllWhat's the max number of DHCP reserved address list?Bo

Routing to the same IP address via different tunnels.

routing the same IP within a VR via 2 different ipsec tunnels, I currently have a primary tunnel and a backup tunnel built for a customer. All traffic from this customer comes from the same PAT address to my firewall. I have 2 static routes going to the same IP addresses via 2 different tunnel interfaces using a metric of 1 for the primary and...

Resolved! intra-zone default

Hi,Do we have an option to disable default intrazone-allow policy which is hidden.thanks

How do you duplicate a device group

Mite seem like a simple question, but it seems you can only clone/duplicate the security rules within the same policy you cloned/copied it from. Im trying to create a new device group and use existing security rules from an existing device group without having to rewrite the same security rules in the new device group. Thank You.

How to logout users from CLI and Web UI

Hi was wondering if we can logout users who are authenticated from Radius and local database if we have super user permissionsAlso will i be able to clear commit which is already in progress because if i stop a commit and try commit at a later time it shows me error saying that there is a commit in progress and will not work unless I restart the...

Apps & Threat update link not visible

Hello Guys,when I was about to update the latest Antivirus, Applications and Threats (Device>Dynamic Updates) of the box, I noticed that the update link for Applications and Threats are not visible. I tried to restart the box but still the link did not appeared. I have attached here the screenshot showing the scenario.By the way I already up...

Zone Assignment

In PanOS, how are the zones established for inbound rules? I have a bi-directional NAT created for a device located in a DMZ. I also have a security policy allowing traffic to the NAT address from the untrusted zone (Internet). When traffic comes in, it is marked as source zone => untrusted, destination zone => trusted and denied becaus...

Duplicate Address Detection (DAD)/Gratuitous ARP

hi!I was wondering if a PAN firewall performs Duplicate Address Detection (DAD) by sending ARP Request packets for IP addresses on an interface once it is connected to a switch? does it do it only for the primary address on an interface or does it do it for all the IP addresses that are configured as aliases on an interface?we have noticed that ...

Resolved! Create HBO GO app

Has anyone successfully created an app for HBO GO streaming?

Resolved! Reset ports to default settings

Hi,How do I set the port to default settings. Once you configure a port, if you don't use it still shows as Red color. I would like to set it to default set where the color is gray.Thanks in advance.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Wildfire questions