General Topics

Join Us in Welcoming LIVEcommunity's 2024-25 Cyber Elite Experts!

LIVEcommunity is pleased to announce the 2024-25 Cyber Elite Program!

LIVEcommunity's Cyber Elite Program recognizes community experts who demonstrate excellence in participation and contributions to other members and Palo Alto Networks customers

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Delete VSYS configuration

I have a VSYS on my PA-5050 which is no more required and needs to be deleted.

What steps needs to be taken for this?

Is it unassigning all the interfaces in that , deleting all policies etc or do we have a proper step by step thing for this?

Thanks all

...

VRRP with Cisco router LAN interface

My default branch configuration, the WAN router is the default route for the client devices on the LAN. Lets say 10.10.1.1/24

My firewall is the default route of the WAN router, lets say 10.10.1.254/24.

Cheap layer 2 switfh on the LAN, so no L3 routin

...

Move/clone/copy from FW Local Policies to existing Device Groups

Clone or move FW Local Policies to Device Groups

Hello good afternoon, as always, thanks for the collaboration, time and good vibes.

I have the following question.

Due to bad practices some admins have made changes and added local policies.

T

...

SAML for direct login on many firewalls

I got SAML working fine with Okta for Panorama. Very nice. Next, I have "many" firewalls which are managed by Panorama, and I find myself directly logging in to them frequently enough that it would be nice to have SAML for that too. (Context switc

...

Traffic hits on the ruler but does not show on the monitor

Hello,
I have a problem in paloalto and is that I see that a particular rule increases hits but does not show the traffic in the logs, however, everything is configured to see it, if I see, the start and end of sessions but in the Fortigate in front o

...

Resolved! BPA Check Points

Dear All,

Is there any document showing how to Implement BPA ?

Thanks

Resolved! Looking for some advice on Licenses

Hello All,

this is just a question to see the best approach, bear in mind this is not a tech question. OK in advance apologies for the next line.

Our company is a gold partner for Cisco. However, we also support Palo Alto. I am a consultant for PA an

...

Resolved! Dataplane issue

Hello

i have 2 Palo Alto in HA Mode Active/Passive and yesterday the Active when down and i lost all the LACPs ,then i start to troubleshooting to see the cause and i found this

could you tell me if is this bug issue or interface issue please ?

18/11/

...

Resolved! Combined source & destination NAT in one rule

Can you perform source AND destination address translation on a single packet? I know NAT rule processing is first rule match so more specifically, can I have a single NAT rule that defines a source and destination translation?

Resolved! Not recognizing standard ports like smtp. Instead showing as Not-Applicable and blocking

Having an issue with a PA-820 that isn't recognizing standard ports and instead flagging them as unknown and blocking them as Not-Applicable even though there is a policy with service ports specified allowing them through i.e. on-prem Exchange Serv

...

Can Policy-based forwarding be used for routing the firewall connection for updates?

We've got a firewall that doesn't have a management interface connection. The default route for the firewall is configured across a tunnel interface. The service route has been been configured to use the outside interface- there's no option to use t

...

Problem with the access to the VPN Globalprotect on Android phone

Hello, I've been facing problems accessing the VPN since Wednesday afternoon from the application on my Android phone. I can't connect to the VPN network. would it be possible to tell me what's going on?

I get an error message when I try to connect :

...

Resolved! Can the configuration be transferred between different PANOS via Expedition?

Dear All

Is the configuration migration from Panos 9.x running on PA to another PA running 10.2.X doable for Expedition? or each of them must have the same version in order to migrate the Configuration using Expedition?

Best regards

Firewall rules for IPv6 targets

We are trying to implement IPv6 in our network, and as part of this deployment all our network resources should run on dual-stack (IPv4 & IPv6). Address objects Types in our firewall policy rules have been written based on IP (IP Netmask and IP Range

...

Radius authentication not working

We have configured Radius on our VM Palo but its not working. Provided screenshots of configuration we have on the FW and output of test command. Routing is defiantly in place as we can ping Radius server, however no traffic on 1812 reaching PacketFe

...

Discussions

Join Us in Welcoming LIVEcommunity's 2024-25 Cyber Elite Experts!