General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! No RST connection

Hi, my scenario is: one Security Rule that allow one IP of inside (10.10.10.1) to outside with ftp application. I've captured traffic and I see that the three way handshake begins but when Palo Alto detects that the traffic is not ftp, it doesn't se

...

Feature Request - Change the content updated email

Hello,

I would like to make a feature request to change the content updated email. What's in there is good, but with the impact that App-ID can bring to internet access, I think PA should add something like change control infomation in the email.

When

...

Brightcloud - Just upgraded to 3.1.6 and...

I'm seeing this in the System Logs every 10 minutes or so: "Connected to Brightcloud update server service.brightcloud.com".

Any ideas why please?

Resolved! Config commit is taking nearly 10 minutes with 3.1.1

Previously, using the 3.0.x series the commit where really fast, it sometimes took less than a minute.

Now, every config commit is taking nearly 10 minutes :

08:40:02 17 Commit FIN OK 08:49:36

Is there anything that could

...

IPSec VPNs for mobile users

Hello,

is there a guide to setup IPSec VPNs for mobile users?

Thanks

SSLVPN Checklist for Mac OS X

Would like to install SSLVPN client on MacBook Pro's. Would like to create installation checklist to make to list how to install and howto use VPN client after installation. I installed on one Mac already but did not see a shortcut or NetConnect ic

...

Resolved! AV version 349

The Release Notes for AV version 349 are empty - no new viruses and no new old viruses. At 66MB is should be a large update. Is version 349 suspect, or are we ok to install it? Thanks --

Resolved! Changing the URL for whois lookups

Hallo! I'm trying to figure out the format of ip-address-lookup-url which defaults to http://www.networksolutions.com/whois/results.jsp?ip= The Network Solutions site is not that useful for addresses allocated to RIPE, APNIC etc so I tried to speci

...

Is ther an OSPF issue in PAN-OS 3.1.5

Hello,

We were doing some tests on ospf, and we noticed that the firewall dont flush his ospf adjacency table even if a nheibour goes down, and this for a duration of one hour, in wich it continue to include the wrong information (concerning the gone

...

Resolved! Virtual Wire - Guide?

We have a PA-500 that's in L3 mode with a simple ethernet1/1 (trust)and ethernet1/2 (untrust) setup.

I want to add a virtual wire to do IPS inspection on traffic to a DMZ network that is currently in front of the PAN, and where it would be a lot of ef

...

Resolved! Feature Request - DNS name as source/destination

It would be very useful to use a public DNS name as a source address or destination address directly in Security Rules. Currently, a domain/category etc.. can be blocked or allowed through the URL filter as a destination. However this can make the s

...

More granular with Vulnerability Exceptions?

When adding a Vulnerability Exception, is there any way to make the exception more granular? (being able to add the exception along with an IP host or range, source or destination IP, zones, or virtual systems.) For example, If I wanted to ignore a

...

Recommended max user per Platform

Hi everybody,

is there an best practice or recommendation for how many users

you should take which platform?

For example:

until 200 user take a PA-500

greater 200 and less than 800 user take a PA-2020

and so on!

Kind regards

Christian

Packet Capture instance within Details of Traffic Log

Hello,

What is the significance of the "green down arrow" packet capture within the "Details" field of the Traffic Log? We have no packet capture defined and it only shows up randomly for certain connections. Is this an automatic output if there are

...

Honeynet off of PA

Hello All,

I have just started configuring PAN 4020 for the first time - a newbie - planning to run it as virtual-wire. However, I was informed that the FW supports hybrid routing - i.e. l2, l3; my question regards a honeynet, that I want to hang off

...

Discussions