General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Microsoft Lync and PAN App-ID

Hi all,I need your help I'm sorry to talk about security and microsoft products :smileylaugh:Do you know if Palo Alto supports ( or plan to do it ) microsoft Lync protocols ? It seems they are using some kind of SIP and RTP protocols but with some vendors specific implementations. They are also using a protocol called PSOM, wich is a pure micros...

Purge Logs

Hi,Does anyone know how to purge logs of PA2020? My drive is getting full and I need to delete logs to free up some space.Thanks,Rex

Some questions relate to mail exchange

Hi All,I'm having a trouble about test public a mail exchange server when making POC for my customer, I have configured nat and set policies for some applications such as : smtp, pop3, imap, ms-exchange, ssl, web-browsing But when testing outside to access into http://webmail.testlab.com, user logged-in successful without showing to content of m...

SSL website and other issues.

Good morning, I am new to a company and a palo alto box (2020 running 3.1.7) was implemented before I started. Ive been playing around with the firewall and we have been having several issues so bare with me. Example of an issue we are experiencing is that a user goes to Sprint.com and wants to log into the website to manage their account. Wh...

Resolved! Application recognition inside http-proxy traffic

Hello!Is it possible to make policy rules for web applications which are inside proxy traffic? In our company proxy is mandatory 😞I positioned PAN firewall in front of the proxy to see users, but now I don't see which web applications are used. If I put PAN behind the proxy, I'll see applications, but I won't see users.Workaround may be URL fil...

After upgrade to OS 4.0.1, can we still use back UIA 3.1.x and SSL VPN Client 3.1.x?

Hi All,After upgrade to OS 4.0.1, can we still use back LDAP 3.1.x and SSL VPN 3.1.x?Because the web site didnt release UIA or SVC for PAN OS 4.0.1... Anyone encounter this issue?

Resolved! Does active-active HA imply that panorama is required for complete reporting?

Looking at the new features in 4.0, it is not apparent whether the reporting in the GUI would have a complete picture in an Active Active HA configuration. Would it? Or would panorama be needed to do aggregated traffic and activity reporting?

Resolved! Removing Custom Reports?

Hello all,I have a number of old Custom Reports I'd like to remove from my PA-500. The Report Templates are long gone but the Reports remain on the left-hand window under the Monitor tab.Anyone know if there's a way to clean unwanted reports out from that window? Thanks!EDIT: My original question isn't quite as clear as I'd like...really what ...

UDP Conversations for VOIP

Hi All; I have an outside VOIP server running H323. The phones internally use a keep-alive mecahnism over UDP 5000 as a destination and varying source ports. The server on the untrust side of the firewall will send the same keep-alives in response. This is known by some firewalls as a UDP conversation or sometimes is necessary in transparent m...

Resolved! admin password change

Hello Community,when I change the admin password, no commit is available...PANOS <= 4.0.1Bug or feature ?Regards,Christian

Convincing Domain Admins to cooperate with PAN User-ID Agent

If the security organization would like to use Palo Alto Networks firewall features for tracking user behavior in a more meaningful way, that alone should be enough to get cooperation from all Domain Admins. PAN User-ID Agent should be given an account to use which has read-only access to Active Directory (and PAN Terminal Services Agent similia...

Difference in URL block categories between panorama and device

I have 2 PA-2050 being managed by panorama, all running 3.1.6. I am using the brightcloud url filtering service we paid for and both devices are up to date.When I do a commit all from panorama it shows "commit all succeeded", however when I check the details of the commit I get a list of messages similar to "member arts is an invalid reference"...

Resolved! How to choose a context of deivce and vsys on CLI

(Panorama 3.1.7)Hi Suppport Team,Could you tell me how to choose a context of deivce and vsys on Panorama's CLI?Regards,Tomoyuki Komure

Hide protocols from display in ACC?

Does anyone know of a way to hide protocols that would normally display in the ACC? Let's say there is an organization that generates a lot of ICMP traffic. This is all known good so they would like the capability to hide it from displaying in the ACC and Dashboard.

Resolved! URL Filter Log Size in PAN 4

I just upgraded to PAN 4.0.1 in hopes of using the new feature that allows the configuration of log sizes. However, the log I am interested in enlarging is the URL Filtering log and it does not appear on the list of configurable logs. Is it included as part of the Traffic or Threat log size configuration or is the URL Filtering log just not one ...