General Topics

Discussions

Sorted by:

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

IPSec tunnel over IPSec tunnel not working

Has anyone ever done tunnel-over-tunnel on the PaloAlto (to Cisco/etc.)? I have been having problems getting traffic to return to a remote site. I normally have multiple IPSec tunnels to remote sites (carrying specific isolated VLAN/networks) over a

...

Add backup GlobalProtect portal to GlobalProtect client

On our PA-1410 under Network - GlobalProtect - Portals - each of our portals (one on each interface for each ISP) - Agent - Agent Config - External Gateway I added gp2.domain.com to go along with gp.domain.com.

I was thinking (hoping) that would upd

...

VPN tunnel flapping after the 11.1.4-h7 upgrade

We have upgraded our FW to 11.1.4-h7. After the upgrade the IPSEC tunnels were working fine. But from the past 2 days we are observing that tunnels are flapping and one of the tunnel is down due to phase-1 negotiation failure due to timeout.

Does a

...

PAN-OS 10.2 preferred release Vs. vulnerabilities

Hello everyone,

maybe this is a silly question, but as far as I can see the current PAN-OS 10.2 preferred release dates back in november and does not include fixes for recently discovered vulnerabilities (CVE-2025-0108, for example). I usually pu

...

GlobalProtect requires token twice - Possible RSA inconvenience

Hi Community. I have an issue on GP: it makes requests for token twice to get through VPN to my network.

I discovered the RSAs feature "Next Token Code Mode", but believe PA (5050 - PAN-OS 7.1.10) has nothing to do when a NTC is requested, so I recom

...

Lab license for Palo Alto

How hard is it to get a lab license from a Vendor such as CDW. Last week I went to their website and purchased 'PAN-PA-410-USG-BND-LAB'.

Today I looked and saw it as canceled. Still trying to find out why it was canceled. The cost of $104 w

...

Resolved! Anyone experiencing slow websites with PANOS patched for CVE-2024-0012/CVE-2024-9474?

Is anyone else experiencing intermittent slow website access with the recent hot patches for CVEs? Currently running 10.2.9-h16 and having intermittent issues with some websites, some users, while others have no issues. I can't find anything in the P

...

Resolved! Is it a way to preconfigure the global protect agent?

I want to predifine the portal url and login user information with the setup of the global protect agent?

anyone did'it, if yes how?

Resolved! Virus/Win32.WGeneric.enqiec

A threat ID - Virus/Win32.WGeneric.enqiec(701854927).

Is anyone else experiencing this?

Resolved! CVE-2025-0110

"Can anyone confirm whether CVE-2025-0110 affects Cloud NGFW firewall? Any relevant details would be appreciated."

Cloud NGFW for AWS

Cloud NGFW for Azure

https://security.paloaltonetworks.com/CVE-2025-0110

Resolved! Which category do I need to use to submit a ticket to remove a device from the portal?

I know it's dumb to answer this but I just need to open a ticket with support to have a serial number removed from the portal. Every option I've tried requires to upload a TSF file and whatnot.

Thank you

Community Expert Verified

Upgrade path question

We have a second Palo Alto that we want to upgrade and then use as a High Availability device to work with our current operational firewall. It had been used before, but is currently offline. I was following the upgrade path from 9.0.13 to 10.2.13-h

...

transfering license without a CSP account

Hello,
I hope someone can help me.
I tried to find myself the answer but looks like I'm getting a chicken-and-egg problem.
To accelerate the learning curve, I've bought a PA-440 on ebay.
To transfer the device, I need a CSP account but since I don't have

...