General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Why does the PAN Route through the management interface?

If I traceroute with the source ip of my private internal interface to the host that my user-id app is located it works.

If I just do a traceroute host to the host that my user-id is located on it fails.

I put a static host route in the VR pointing out

...

Problems with installing SSL-VPN Client

Hi

Has anyone else had any problems with Installing PanInstaller on Windows 7?

I have managed to install it on some machines but sometimes the installation just drops and in the event viewer I get:

EventId 7030

Source Service Control Manager

PanInstaller

...

Not detecting Lotus notes traffic correctly

Hi All,

I have a system, running 4.0.5 ( about to be .6 ) in TAP mode at a PoC site.

They run Lotus notes, with one server platform, but two different types of clients.

We are getting a lot of unknown-TCP, which is actually going to the notes server, an

...

Is it possible to use public IPs on the same subnet on different interfaces?

Hello,

We want to use inbound NAT in different VSYS on a PAN 4020 device. The question is, is it possible to use adresses(mip equivalent on netscreen devices) from the same subnet on different phisycal interfaces in different vsys? On netscreen device

...

Resolved! passthrough page without authentication

Hi all, I have a 2050 pair and I'm trying to find a way to prensent my users with a page with 'terms of use' that they would accept and continue on to a list of websites that I can control. I don't want to authenticate the users, just give them a spl

...

Resolved! SSL-VPN on iOS 5 Device

I have an iPad running iOS 5 and was wondering the same thing as everybody else. Is there an App yet to do this? If not, has anybody else found a work around yet. I, like all of us here, would love the idea of being able to VPN with a tablet.

Is there a possibility to limit the number of sessions

Hi there,

I know that each model has a max number of sessions that can be handled overall. But is there a way to reduce this number of max sessions in the configuration?

Many thanks for your help.

Regards,

Sylvia

Can you limit the bandwidth per source IP?

Hi there,

is there a way to limit the bandwidth per source IP?

As far as I know the QoS policies limit the bandwidth per interface not per source IP. Is this correct?

Regards,

Sylvia

how to format of SSD.

For the replacement test,

I had set the spare SSD in the PA-5000,

and some logs was written on SSD.

Could you tell me how to format of SSD?

Reporting

Hello,

New to the forums and Palo Alto, and I have a simple question.

How do I pull a report for all websites a user has visited?

Seems straight forward enough, but a user activity report is extremely lacking and to be perfectly honest I

...

Resolved! Works User-id XML API with AD agent?

Works the User-ID XML API only with LDAP Agent or works too with AD Agent?

We need to make a logof script to delete the entries of some users.

Resolved! How do I monitor how much of the IPS cpu is being consumed?

I have a PA-4060 and am monitoring via a TAP port my Internet connection and want to see how much traffic is being sent to the IPS engine hardware. I need to know this because I know the IPS functionally is 1/2 of the rated throughput of the firewal

...

User-ID doubt

I have some problems with user identification and I'm very confused about how it works.

In the case that we use User-ID agent with AD. Is it the following process correct?

1.A user makes a logon in PC-A , with his domain credentials.

2.An event is creat

...

teamviewer download

I tried to download temaviewer (TeamViewer_Setup_it.exe) but the firewall pa500 blocked me like viruses Trojan/Win32.agent.ckovs what should I do?

Resolved! Support on PA for UNIX-Syle tracerouts

Does PA support unix-style tracerouts. I have enabled ICMP and PING, but tracerouts from unix hosts through palo alto are still being denied. Looking at this a little bit further, we noticed that windows-style tracerouts use ICPMP echo requests and r

...

Discussions

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

Resolved! Why does the PAN Route through the management interface?

Problems with installing SSL-VPN Client

Not detecting Lotus notes traffic correctly

Is it possible to use public IPs on the same subnet on different interfaces?

Resolved! passthrough page without authentication

Resolved! SSL-VPN on iOS 5 Device

Is there a possibility to limit the number of sessions

Can you limit the bandwidth per source IP?

how to format of SSD.

Reporting

Resolved! Works User-id XML API with AD agent?

Resolved! How do I monitor how much of the IPS cpu is being consumed?

User-ID doubt

teamviewer download

Resolved! Support on PA for UNIX-Syle tracerouts

Recommended Subscription Licenses for east west traffic

Global Protect App/Gateway Login Banner

Quick upgrade query

Push Scope isn't showing and Commit button grayed out after upgrade Panorama

PA Active/Passive and Cisco stacking LACP

SYSTEM ALERT : medium : MLAV: Unknown error

Re: ACC shows ipv6 addresses in source/destination IP

Re: Quick upgrade query

Re: Recommended Subscription Licenses for east west traffic

Re: Certificates not showing under Devices Certificates or CLI

Unlock your full community experience!

Resolved! Why does the PAN Route through the management interface?

Resolved! passthrough page without authentication

Resolved! SSL-VPN on iOS 5 Device

Resolved! Works User-id XML API with AD agent?

Resolved! How do I monitor how much of the IPS cpu is being consumed?

Resolved! Support on PA for UNIX-Syle tracerouts