General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

HA2 problems

Hello together,

We have a A/A cluster with PA-5050 boxes running PAN-OS 4.1.5

At the moment one node is suspended due to another problem. We had the problem that we lost the HA2 connectivity (main/backup) between the cluster nodes and traffic through t

...

Resolved! What is policy order inspection on Palo alto?

Hi All,

in policy tab there are a few policy like security, NAT, Qos, PBF, Decryption, Application override, captive portal and DOS protection. my question is what is policy order inspection on Palo alto.which policy palo alto will look first?

thanks

In

...

Resolved! Merge XML configs in Panorama?

Hi -

I was wondering if it's possible to merge a portion of the Panorama config that I'm manipulating offline (say in Notepad++) with the existing Panorama running config? Specifically, I've got objects I'm defining in a device-group and I'm defining

...

DLP and Custom Reporting

I was wondering if there was a way to create a report off of any DLP policies that are triggering daily so you can get a username and ip of anyone triggering this policy. Just was curious if anyone had any success in custom reports doing this.

Resolved! Erros when update software and signature in PA 2050 v 4.16

HI all,

I am newbee

When i update software and database for Antivurs, threat prevention

But i met a erros:

Failed to install with the following errors. Image File Authentication Error Failed to load /opt/pancfg/mgmt/sw-images/PanOS_2000-4.1.7

Pls hepl me

...

Dual ISPs with 2 PAN Firewalls

I am in need to set up a branch office with Dual ISPs and PAN firewalls. Everything I've seen & read detail the process with a single PAN and PBF's. Has anyone accomplished the same with 2 PANs?? I am trying to get the set up in my head & having

...

Filtering IPv6 extension headers

Can we use Palo Alto fw for filtering IPv6 Extension headers such as Destination option, for example?

Regards,

Igor

Exclude certificates generated by a third party CA from being decrypted

Hello,

The use is very simple : many government agencies (social security, tax collecters...) are using SSL websites signed with own CA (which is great for their own security) but creates many problems with PA decryption.

Is there a way configure Pal

...

Problem updating software

Hi,

I have a brand new PA-200 that for some reason refuses to update it's software.

This is the error I get when I try:

"Successfully downloaded
Preloading into software manager
Image File Authentication Error
Failed to load into software manager. Please r

...

Resolved! Extended validation certificates, Global Protect

Hi all,

I'm trying to use Extended Validation certificates on my Global Protect so that users connecting to the web-portal will see our EV certificate. I've successfully imported my certificates and assigned them as the server certificates in both the

...

Resolved! PA-200 - SMTP \s

Cant send emails out. Reviving emails works fine.

If i try to telnet out to a known working MX it times out.

tried to allow outgoing firewall rules with app ID and Service. nothing works.

Running PAN OS 4.1.7

This worked on earlier versions of the PAN-OS

...

how to check PAN performance after demo to customer

Hi,

I would like to know how to check PAN performance after demo to customer. because I'm not sure if the device can support the load on customer site.

Thank you.

Resolved! Internet Explorer 0 Day - Sept 17, 2012

Is there a signature for the new IE 0 day yet?

https://isc.sans.edu/diary/IE+Zero+Day+is+For+Real+/14107
http://technet.microsoft.com/en-us/security/advisory/2757760

There is a metasploit module out so.. that means there a working exploit 'in the wild'

...

Resolved! Sending user logins via Syslog

Hi all,

I have not found a way to send user logins to an external syslog server. I have traffic allows/denies coming through successfully, and "misc. system events." Is there a custom configuration that needs to be done to get user login date/time? We

...

Resolved! clear arp

Hi,

Do we have a option to clear arp entry for only one entry ?

I tried this command but it seems it clears all arp for an interface.

Discussions

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

HA2 problems