General Topics

Where/How to learn PaloAlto Firewall?

Good Morning All, I am new to this site and new to PaloAlto Firewall. I have used many other firewall and looking to get familiar with PaloAlto technology (Firewall/Network), I am wondering if there is any Online Demo access to PaloAlto networking devices ( Firewall Dashboard-similar to Meraki one) or available community addition PaloAlto OS ...

Resolved! GlobalProtect with Vodafone and Telecom

One of our Colleagues isn't able to connect from his home in Germany to our Gateway in Switzerland when using the GlobalProtect Client (V. 5.1.0-75) when using either his Home Internet Connection (via WiFi) nor when using a Mobile Hotspot (Vodafone Mobile on iPhone), are there any Limitations or issues known with this Combination?

VM Series in Redhat Openstack Train 16

Hi,Does anyone tried deploying VMseries on a Redhat Openstack?

Palo Alto LACP to Cisco VSS

Hi AllI have 2 x Palo Alto 3020 FW's. In Active / Standby.Need to create an Aggregate group and add 2 x GB interfaces to the Aggregate Group. on the inside.I then connect the 2 GB interfaces from FW01 and 2 GB from FW02 down to a cisco switch in VSS cluster.Does the channel group need to be the same on the Cisco side? I would try this but dont h...

HA2 interface not up using HSCI cable

Hi Good day, Our client received two Palo Alto units, including an HSCI cable. However, they noticed that the HSCI cable is not functioning. When they connect it to the HSCI port, the LED port does not light up. However, when using a normal SFP with fiber, there is no problem. Is there any solution that can help us, or should they proceed with t...

No DNS, cannot ping anything above gateway

I'm trying to set up a PA-820 from scratch, but would like to update and set up rules before placing it on top of our network. Currently it is set up as a DHCP client, parallel to our office router, connected upstream to a Charter AP and modem (for some reason, this is the only way they'll give us a static IP and a high speed connection to the i...

Reading logs in XDR

how can we read logs in Cortex XDR retrieved from endpoints, is there any way to read logs via xdr?

SMB Mid-Market Competitors

Hello All, About 2 weeks ago and in the forth coming weeks, the key target area for me will be the PA-400 series and the PA-14xx series as we shall be focusing on the SMB / SME / Mid-Market sector. However as I have worked in this area for 15+, I am aware you have you SonicWall, Watchguard, DrayTek, ZyXEL are heavy lifters in the UK market. Ou...

How does Expanse know about my website?

I have the following message in the User Agent field of my Apache log: Expanse, a Palo Alto Networks company, searches across the global IPv4 space multiple times per day to identify customers&#39; presences on the Internet. If you would like to be excluded from our scans, please send IP addresses/domains to: [email protected]"...

Reminder to Register / Log In to Make the Most of LIVEcommunity!

LIVEcommunity is thrilled to share a new feature: a reminder to log in or register to get the best community experience possible! If you’re not logged in, you will notice a new prompt in the upper right corner of our site, guiding you to sign in or register to join our community. By registering, you'll unlock a world of benefits, incl...

Resolved! FIPS-CC Mode Initial Setup

We are now required to switch to FIPS-CC mode for compliance. I have read the Admin Guide section about switching the operation mode to FIPS-CC but have a question about a FIPS security function. The guide states that I can save my current running-config since this change will revert the FW back to factory defaults and all configs will be lost b...

Set a new GlobalProtect VPN portal to prisma for 1000+ devices

Hi, I've been asked to roll out a new VPN portal and automatically switch users over to it in a phased approach. I don't think this is possible via Palo Alto (as it will set it for all users immediately) and Group Policy has some limitations around phased approaches so we are using SCCM. I have a script which i am testing but getting mixed resul...

Ubuntu_OpenLDAP with PAN-OS User id

Hi All, Is there any document which will show how to configure Ubuntu based OpenLADP as a user id agent with Palo Alto firewalls. How to add the LDAP server into Server monitoring profile.

Resolved! EOS PAN-OS 10.0.12-h5

How is the EOS (End of Support) for PAN-OS 10.0.12-h5, which was released on January 8, 2024?

Resolved! Vip(DNAT not working)

This is my topology. From 30.0.0.10 i would like to access the server 192.168.0.2 with the help of PA wan interface IP(30.0.0.1)I have created DNAT and Ssecurity policy . Object Prenat IP is 30.0.0.1/8 and Webserver Ip is 192.168.0.2/24, when I try to open 30.0.0.1 from my web browser I am not able to see server's web page. I took a captur...

Discussions