General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

FIPS mode algorithm decryption?

The FIPS Mode notes state:"Non-FIPS approved algorithms are not decrypted and are thus ignored during decryption"Can someone clearify what exactly this applies to, and what is not decrypted?

Resolved! How do you terminate administrative sessions (ssh, https) on the firewall? From the CLI or the GUI??

How do you terminate administrative sessions (ssh, https) on the firewall?What is a CLI command that can be used to terminate all administrative sessions to the firewall?Is there an equivalent action that can be done from the GUI?Thanks!-Murali Raju

Can't authenticate users in nested groups (AD, Radius)

Hi All,I have a rule to allow access to Facebook. The rule works if I list individual users, but not groups.We have a single forest with 2 child domains.Universal Group "FB Allowed" has the following groups as members: "OU1 FB Allowed" and "OU2 FB Allowed"These universal groups contain members from both domains.I'm trying to avoid having to ma...

kill hung jobs?

Hi all,How do I kill a job that has hung, such as a content download, that stops all other downloads from being able to run?

Resolved! Hosting Websites - Google "Crawling" issues...

I haven't found the cause just yet, but I've noticed that since implementing our PAN firewalls, (PA-2020) I've noticed in our Google Webmaster tools that Google has stopped indexing our websites. This is causing me big grief as you could imagine. Now, I am allowing incoming "web-browsing" but I have to wonder if somehow the firewall is blocking...

LDAP Schema Attribute as User Report filter?

Hi All,I have a curly one, that a site has tried multiple solutions from HP, solarwinds, checkpoint, juniper etc etc to solve, and its all based around executive level reporting.They have one large OU, with all users in it, two main classes, and then say 6 divisions in each class.The execs want usage reports, initially with a split between class...

MAC Destination Problem (4.0.4)

We have a new pair of PA-2050 (HA).The last two weeks works fine with 4.0.1 but last Thursday I upgraded them to 4.0.4 and two of our networks had problems to go trought the firewalls.I saw in the traffic monitor that the rules were ok and that traffic were allowed, but the response not reach any equipments of that network.Then i use wireshark a...

pan agent

Hello Guys,sorry to bother you.have a question, for Pan agent to identify users traffic. does it use only the management port ? ? ?regards,bp

Resolved! Temperature setting

Does anyone know what the high temperature alert setting is on a PA-500? Are the alerts user configurable?Mike

Activate Zone Protection with default values

Hello,How safe is to activate Zone Protection with default values in terms of having problems with blocking normal traffic afterwards? Is there a way to measure from Palo Alto (3.1.7) the total incoming packets/sec to our network in order to be able to customize the Zone Protection default values?Kind Regards,Andreas

If I enabled AV, PA's speed was degradation.

Hello all. I’d like to know about AV of PA relate to inspection ability and speed degradation. I had a test with Anti-Virus/Spyware signature.When I send a zip compression file throughout PAN(4.0.3), PA’s speed was degradation but if I send a RAR throughput PAN, it is not show speed degradation form PA. There are difference compression method ...

Resolved! App Scope Tab Customisation

Hi All,Is it possible to modify the widgets in the App Scope Tab?

QoS profile Class names

Hi All,Can the class names ( 1-8 ), be changed, to names instead of numbers?Primarily I'm interested in this for the real time vies via QoS statistics, so its easier to see in the graph, what colours and namesare actually for what application groups that I'm applying QoS too.

Resolved! no-decrypt list?

I am looking for a list of sites that are known not to work with SSL decryption but have been unable to find anything. I would like to see a KB article published or a do-decrypt forum so users can post what they find. Citrix published IP addresses for GotoMeetingBlock 1 216.115.208.0-216.115.223.255Block 2 216.219.112.0-216.219.127.255Block 3 6...

proxy arp and icmp redirect

Hi,do u have any idea about palo-alto box support "proxy arp" and icmp redirect?regards

Discussions