General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! Global Protect message is CN name mismatch.

Hello everyone.

Global Protect message is "The certificate CN name mismatch, The certificate is not issued to x.x.x.x" when I connect GP.

I configure to import certificate that issurer is Go Daddy Secure CA.

Why does CN name mismatch???

when I connect to globalprotect, it show VPN certificate is not within its validity period

after show this error, can't connect to any internet or intranet, and the system date auto changed to 2013

how to fix this issue? Many thanks.

How to configure VPN and Certificates to cut VPN access when the Certificate is revoked.

Hello team,

I need to know How to configure VPN and Certificates to cut VPN access when the Certificate is revoked.

I have revoked a certificate into the Firewall but I can connect anyway from VPN.... I am using on my GlobalProtect connection and

...

Resolved! Reports

Hi everybody.

When I got the report from palo alto the following problem occurs ( b' ' ).

This report is in PDF format and cannot be edited. There was an extract of the report before, but there was no such problem.

b'Risk' b'Application' b

...

Session count can't break 1025

Hi all, I am running a VM-series on aws and it has a issue with session, it's cannot break 1025. I'm new to Palo Alto so there are many term i really don't understand. Some body please tell me what is Active Session? Is it Session count on UI? Why ca

...

Resolved! Dual IPSEC tunnels load balanced between two endpoints

Is there a way to setup TWO IPsec tunnels using different paths (for instance, two different ISP's) and have them share the traffic load between the two vs having a primary and backup?

I'm aware we can setup two tunnels and use path monitoring to f

...

Resolved! Cortex XDR Cloud Identity Engine Integration

We have planned the configuration of the Cortex XDR Cloud Identity Engine for our on-premises service. Could you please tell me whether the Cloud Identity Engine agent should be installed on the AD server or on a separate (NEW) server? What is the be

...

Resolved! Custom App-ID iMessage

Hi,

We have recently installed a PA-2020 at our college and am very happy with the device. The only issue we are having is that students are still able to use iMessage on their iPads. I can't find an existing app-id for that and am wondering if anyone

...

Resolved! UserID/Group mapping

I have created a LDAP profile, group mapping and user mapping from Panorama, and it seems to be working.

Im able to do "test authentication username xxxxxxx.test@xxxxxxxxx.com authentication-profile xxxxxx-LDAP password and this works fine.

My prob

...

Website marked as phishing

Hello,

Our backend website "backend.knokcare.com"was flagged as "phishing" by PaloAlto. May you change this categorization, please? We've already requested this change thorough https://urlfiltering.paloaltonetworks.com/ to "Health-and-Medicine". "k

...

Resolved! Palo Alto API for End of Life services.

Team,

Any aware if Palo Alto provides any API's which can help with End of Life dates? e.g. check for a device by serial number, by model number, check for the PAN OS version etc.

Regards,

Nikson.

DNS Security checks for records different than A

Hi,

Does DNS Security checks DNS records other than A and how it works ? I think CNAME are checked as they are similar to A in meaning of request content. How about other records like PTR and TXT as they can be used more frequently for C2 traffic?

...

OIDS differents on HA A\P nodes

Dear Team, I have a suggestion. Where can I find more information about OIDS of HA peers. I need some claryfication about, can this OIDS be different on HA Active Passive.

I have two PA 5220, A\P. Pan-OS version is 10.1.10-h1.

Need some advice.

...

Limit Hub and Spoke PA 460

We have done the creation of a tunnel (VPN) as hub and spoke, currently we will connect 203 devices to this tunnel, we have been researching but we have not found information on how many peers this tunnel can support with this hub and spoke configura

...

Resolved! Push is grayed out

Hi Login Banner and System Log are created and commited in Panorama. and then click on Push button on top right corner. I got the below window. Why the Bush is grayed out? Is there something needed to completed before the Push? Thank you

General Topics

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free