General Topics

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Remote Management of PA-200 through SSL-VPN

I would like to be able to reach the web management interface and the CLI of our PA device, while connected through the Global Protect VPN. The networks are on separate segments, and I have access routes and rules in place to allow the traffic to the

...

Resolved! Rockmelt

I'm doing some test on pa500 in our site, and trying to apply some feature like block of facebook app i see a strange behavior. First of all the policy of decrypt and bloking works correctly because the facebook is in "read only" state without possib

...

Resolved! PAN-OS HTML Variable <user/> Format?

Hello,

I am developing custom Response Pages for our site and have a question concerning the <user/> variable's format. The 'book' says that this variable will have "the username (if available) or IP address of the user".

My question is if the u

...

Specifications for multimode fiber module,.

Hi All,.

We are trying to use fiber port in the PA 2050 box, which needs to be directly connect to switch. we used the fiber module ( Multi-mode ) which is same as used at the switch end, But the communication is not happening between the switch and P

...

QoS performance data.

Hello all.

would you please tell me where is the QoS performance data sheet per PA-4000 or PA-2000 or PA-500 series?

thank you

Resolved! Question regarding site to site VPN

Hello,

I hope you may be able to help. I am a little confused regarding the site-to-site VPN tunnel configuration (remote end will be a Cisco PIX).

Best regards

Stephen

I get the following error when attempting to commit using PANOS 4.0

Details
·
·
·
Commit f...

Resolved! About HSRP v1 support.

Hi

About HSRP v1 support.
Is PAN-OS HSRP v1 supporting?

Is support HSRP v2 and VRRP?

Thanks.

Resolved! Error with installing licenses

Hi there,

I am having troubles with installing the licenses on the firewall.

I tried to receive the keys from the license server without success. I have also tried to enter the authorization code also no success.

Then I have tried to manually upload the

...

Resolved! Panorama - Xen Server

Hi all,

All our architecture is built on Citrix Xen Xerver. Does anybody already tryed to install Panorama under Xen Server ?

I tried with Xen convert to move from Pano .ovf to Xen format but I have a error "Kernel Panic - not Syncinc: VFS; Unable to m

...

Resolved! LDAP Authentication 4.1.x Panorama and FW

There is a ton of various old and somewhat newer info on LDAP related info around, but I have not been able to find any good source on step by step and how to troubleshoot - a lot of the junk seems to reference user-id stuff, which I believe is not r

...

UserID present on Agent but not Palo Firewall

Does anyone know under what conditions a Palo firewall will not be tracking a user ID, when said ID is being tracked by a Palo agent that is active and operational?

I have had experience of the agents themselves losing an ID for various reasons, but c

...

User-ID configuration guide for version 4.1.2

Hi Guys,

I was just wondering if you guys (PAN) could come up with a document on the installation guide for User-ID version 4.1.2. I did look up the knowledge base and found out various documents regarding Syslog, API and other stuff. But I am looki

...

How do I set up VPN for Windows and IOS devices?

I'm trying to figure out how to allow users to VPN into the Palo Alto, and I was wondering what my options are?

I attempted GlobalProtect, but it really was not clear on how to allow users to download the client for the first time. I'm not sure that I

...

Problems with the Apps/Threat Database

Recently my developers are complaining about some aspect of their site development that is failing. Long story short, I had to roll-back to the 307 version of the apps/threat database to get the site to work again. I'm not a programmer and barely kno

...

Slow Loris and Palo Alto Firewalls.

I had a number of questions from clients regarding Slow Loris/Flame and others. Wanted to post on this so others could look it up if it came up.

In response to the slow loris, the attack is executed based on timeouts with HTTP. This leaves open conn

...

Discussions

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource