General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! User ID with Separate Domains

Team,

I have one FW running agentless User-ID in an environment with two separate Domains one is XYZ and another domain is 123. User-ID can see both domains but cannot monitor both of them so users that login on XYZ domain are restricted in the pol

...

Resolved! Warnings: External Dynamic List <list> is configured with no certificate profile.

Warnings:

External Dynamic List <list> is configured with no certificate profile.

Please select a certificate profile for performing server certificate validation.

Customer went from 7.1.x to now 8.0.x and is using a MineMeld link in the External D

...

Resolved! Prisma access blocking bing.com integrated chatgpt.

Prisma access is preventing me from using Bing-integrated Chatgpt. Yeah, there is a persistent problem with Prisma access on Chatgpt. On the Sase page at https://sase.status.paloaltonetworks.com, you might view.https://sase.status.paloaltonetworks.co

...

SIP traffic being dropped in drop.pcap on the PA with PAN OS version 10.2.4-h2

SIP traffic is not working properly, we recently upgraded to PAN OS version 10.2.4-h2 and seeing issues with multiline calls

Steps taken:

ALG is disabled, we have already created SIP-override and RTP override but no luck.

@Param_Upadhyay @UtkarshKu

...

Resolved! PANORAMA: Local override settings and behavior with new Template Stack

Hello good afternoon, here again with some doubts with some new doubts about Panorama, thank you very much for the collaboration and support.

What happens in this case:

I have a firewall that allows a certain template stack, with X Networks and Devic

...

Resolved! The dataplane is restarting

After this log message the dataplane start a auto restart and I don't know what meaning. After five minutes the dataplane come back up and the operation is normaly.

Severity: critical

Description: gdb:2 tracked gdbs, calling early dp down fail

I us

...

Resolved! Import of SSL-TLS-cert failed. Mismatched public and private keys.

We are adding a new Web Server certificate for portal validation in our brand new firewall.

We created the CSR in the Firewall and exported it to sign it with GoDaddy CA.

Once we download the bundle from GoDaddy we extracted the root, intermediate, a

...

Can't create DNS Proxy using Panorama

ISSUE

When try to configure DNS Proxy with panorama after commit we get next message error:

dns-proxy -> xxxxx-> server-profile 'yyyyy' is not a valid reference
dns-proxy -> LAN_speedup -> server-profile is invalid

xxxxx ->dns proxy configured

yyyyy ->se

...

Resolved! Upgrade V9 to V10 issue

We have a number of 3020's coming to EOL and running max version 9.. We have purchased new PA-450's to replace these but they can only run on min version 10.

When I load the config from 3020 to 450 commit fails as part of the config is either no lo

...

Can not Login PA-HDF - Deploy Trial VM-Series OVA

I downloaded and deployed the Trial PA-VM for Private Cloud (vSphere7.0), but I could not log in using admin/admin at the "PA-HDF Login:" prompt.
I searched the Community for similar issues, but could not find a specific solution. I am having trouble

...

UserID WinRM-HTTPS and Kerberos

I tried generating a self signed certificate on the firewall and installed this on the domain controller and assigned it to WinRM-HTTPS. This worked but I can’t figure out why it’s rejecting the certificate from our internal CA.

Certificate SSL Self Signed Expired GP SSL-TLS Profile Global Protect

Hello Live Community, how are you doing?

I have the following doubt and concern

If I have a PA configured with a Self Signed SSL certificate for Global Protect use, SSL/TLS profile for GP, and that certificate is is close to expiring.

All the w

...

Resolved! Security Policy action is "allow", but session end reason is "policy-deny"

Hi All,

l think l am missing something fundamental. l have a policy with "allow" action, but in the traffic logs session end reason is "policy-deny" :

Despite all this, l am still able to access the server:

Resolved! Explicit allow to Microsoft Update services

I've read through a dozen questions and the scores of answers to those questions, and I'm finding a mix of outdated information, bad information or just unrelated options... I suspect this is going to send down a rabbit hole, so I'll try to compartm

...

I'm planning to upgrade my Palo Alto firewall from version 9.0 to 10.1. Are there any critical points to consider before proceeding with the upgrade?

Hello

I'm currently planning to upgrade my Palo Alto Networks firewall from version 9.0 to 10.1. As this is a critical operation, I want to ensure a smooth transition without any disruptions to our network and security policies. Before proceeding wit

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help