General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! Question regarding site to site VPN

Hello,I hope you may be able to help. I am a little confused regarding the site-to-site VPN tunnel configuration (remote end will be a Cisco PIX).Best regardsStephenI get the following error when attempting to commit using PANOS 4.0Details···Commit failed (Module: device) Error: tunnel configuration error :· Error: tunnel VPN-tunnel-BVB: invalid...

Resolved! About HSRP v1 support.

HiAbout HSRP v1 support.Is PAN-OS HSRP v1 supporting?Is support HSRP v2 and VRRP? Thanks.

Resolved! Error with installing licenses

Hi there,I am having troubles with installing the licenses on the firewall.I tried to receive the keys from the license server without success. I have also tried to enter the authorization code also no success.Then I have tried to manually upload the license files, it comes up with an error again. I can't tell which error because the error messa...

Resolved! Panorama - Xen Server

Hi all,All our architecture is built on Citrix Xen Xerver. Does anybody already tryed to install Panorama under Xen Server ?I tried with Xen convert to move from Pano .ovf to Xen format but I have a error "Kernel Panic - not Syncinc: VFS; Unable to mount root fs on unknown-block(0,0)"Can anybody help ?CheersV.

Resolved! LDAP Authentication 4.1.x Panorama and FW

There is a ton of various old and somewhat newer info on LDAP related info around, but I have not been able to find any good source on step by step and how to troubleshoot - a lot of the junk seems to reference user-id stuff, which I believe is not relevant, shouldnt I be able to configure an LDAP server profile, a authentication profile, and th...

UserID present on Agent but not Palo Firewall

Does anyone know under what conditions a Palo firewall will not be tracking a user ID, when said ID is being tracked by a Palo agent that is active and operational?I have had experience of the agents themselves losing an ID for various reasons, but currently I have a scenario where a user is being prompted via a Captive Portal (a console session...

User-ID configuration guide for version 4.1.2

Hi Guys,I was just wondering if you guys (PAN) could come up with a document on the installation guide for User-ID version 4.1.2. I did look up the knowledge base and found out various documents regarding Syslog, API and other stuff. But I am looking for more basic installation of the Agent on the Domain Controller ( User Identification, Setup...

How do I set up VPN for Windows and IOS devices?

I'm trying to figure out how to allow users to VPN into the Palo Alto, and I was wondering what my options are?I attempted GlobalProtect, but it really was not clear on how to allow users to download the client for the first time. I'm not sure that I want to pay for it if all I'm doing is allowing users to VPN anyways.I've set up an IPSec VPN to...

Problems with the Apps/Threat Database

Recently my developers are complaining about some aspect of their site development that is failing. Long story short, I had to roll-back to the 307 version of the apps/threat database to get the site to work again. I'm not a programmer and barely know the Palo Alto environment, so bear with me. Quite simply I can reproduce the problem by trying ...

Slow Loris and Palo Alto Firewalls.

I had a number of questions from clients regarding Slow Loris/Flame and others. Wanted to post on this so others could look it up if it came up. In response to the slow loris, the attack is executed based on timeouts with HTTP. This leaves open connections on the server and slowly attempts to tie them all up. This is only functional if the app...

Publicly Routable DMZ for Microsoft Lync 2010 Edge Servers

Hello all,I'm hoping you can help me with a problem that has me stumped. I'm trying to configure our PA 5020 to support a Microsoft Lync 2010 server edge environment being load balanced by an F5. Per Microsoft, in order to do this the IP addresses on the edge servers must be publicly routable and cannot employ NAT. Currently, my external inte...

Question about how to deploy PAN-2020 for a lab with a DSL gateway

Just had a dedicated DSL modem installed for our test lab. Would like to know some recommendations on how to cut over to the DSL as our internet source for the lab, rather than hitting the corporate lan as it is currently. I can set up the DSL as the "standard" gateway, with or without a lan side with DHCP, or as a passthrough device or ethernet...

Resolved! PANOS can not be downloaded

Hi All,I find the new panos 4.0.12 in the download site, however when I try to download it, the message of new prompt browser is display " file not found".Is there anyone has the same experience?Thanks,Joy

Resolved! How to convert .crt to .pem or .pkcs12 format

Hi Guys,I know this not the best place to put up this question, but I feel someone might have good experience or knowledge who can share it out. I had a self generated certificate for SSL-VPN and Captive Portal on the Palo Alto. I then generated a CSR for the same certificates and handed it over to the customer. The customer then sent it to th...

one leg setup clarification ..

hi all,i need to setup two PA-2050 ( HA mode ) but am not sure about the design were i need some help her, the customer network is devided into vlans and they all communicato to each other through the corre switch ( cisco 6500) and if they require internet access the core switch will route them to a firewall ( firewall module in the core sw ) , ...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!