General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! .com and .net sometimes blocked as spam?

Running 3.1.2 and have quite a few instances in our PAN log where for some reason a URL (not noticed a pattern other than the URL preceding the problem URL is typically really damned long and some sort of query/search) is blocked and all that shows o

...

Resolved! SSL Decryption Fails: sec_error_reused_issuer_and_serial

In the newest PA-OS 3.1.2 seems to be a problem with the Proxy-Certificate.

If browsing with Firefox, you get "Errocode: sec_error_reused_issuer_and_serial" on all HTTPS-Sites, if you have implented the proxy certificate in the certificat store (and i

...

Error while downloading apps, threats and antivirus updates after upgrading to 3.1

Hello

After upgrading my firewalls to 3.1, i was trying to upgrade content and antivirus dtabases, but i got yhis error message :

Server error : Failed to check content upgrade info due to generic communication error. Please try again later.

I'am using

...

Access into the panorama database

Hi All,

What access is there, if any, into the database within panorama, for a prospect that is using an automated response/ticketing system?

We would want to be able to periodically query the database, for example to extract out infected workstations,

...

DNS Zone Tranfers not working through PA

Hello,

I have a PA in front of a DNS server and since the date we installed the PA, the DNS zone Transfers to the remote site is not working.

The remote DNS admin stated that there are timeouts and that the firewall should allow fragmented packets to p

...

Custom Reports - Incorrect Dates

Hello,

We are currently running 3.1.1 Panorama code. Are there any known issues with creating custom reports and the output shows dates in the future? For instance if we create a report and choose a custom date selection (last 2 weeks for example).

...

RADIUS (not Active Directory) and Allow List

Hi, I'm configuring a RADIUS different than Active Directory, I use Radius users for SSL-VPN and GUI and all works fine but always I've to add manually the Radius user to Allow List in Authentication Profile, is there any way to avoid this. If I've t

...

internet load balancing

Hi,

Our customer has existing Sonic wall TZ210 , they confiugred Load balaning between internet links. 90% of traffics are going through the primary link & 10% ie, defined traffic from few computers are going through the secondary link.

Now we want to

...

Block msn-file-transfer security rule in VWire mode

Hi All,

I configured my PA2020 to block msn-file-transfer from any any but it doesn't work. I checked Monitor traffic log already show "Deny" on msn-file-transfer. However, it is successful to transfer a file in msn in my test lab. Below is my rule se

...

Resolved! 3.1.1 and captive portal

Hi,

I upgraded my pan to 3.1.1 version and I never find these commands:

"debug captive-portal"

tail mp-log captive-portal

After the upgrade the radius authentication doesn't function

any suggestions?

thanks

Resolved! BrightCloud - are they having issues?

Seems lots of URLs are being flagged up that appear to be in totally the wrong categories.

These are URLs that all have no link/commonality whatsoever and that worked perfectly yesterday but today are in categories such as spam-url and cult and occult

...

Terminal Server Agent RoadMap

Hi All.

I'm really interested into know what is the evolution of Terminal Server Agent. I mean, now only Windows Server 2003 and XenApp 4.5 version are supported for the moment, but new environments are installed on XenApp 5 or new XenApp 6 in o coupl

...

Resolved! URL Filtering Process Order

we've run some tests on both at client side and in our office lab.

the process for handling url fitlering will start with BLOCK list --> ALLOW list --> URL Category

the logic of it is quite understandable, however, the problem lies with BrightCloud DB.

...

Vlan information in logs

Device: PA-2050

OS: PANOS-3.0.6

Hi

I have a question about Vlan. In the different logs you cant find "source vlan" anywhere. I belive this is cause Palo Alto is a zone based firewall and you should use zones to separate different network types rather th

...

Resolved! Address Issue [20191]

Hi, support team.

There is the following note on the release note of PANOS3.1.2:

- Address Issue : [20191]System instability may occur in deployments using the Terminal Services Agent to

identify users.

I would like to know that more specific.

Thank you,

...

Discussions