General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4437 Views
  • 0 replies
  • 0 Likes

Live Community Access Denied

Hey all, When i attempt to access this link regarding a cert expiration, i get Access Denied; https://live.paloaltonetworks.com/t5/customer-advisories/emergency-update-required-pan-os-root-and-default-certificate/ta-p/564672

Dataplane is down: path monitoring failed.

One of our passvie firewalls encountered the problem "Dataplane is down: path monitoring failed". The reason may be that we replaced the fan. At present, I found the following link to the official documentation of Palo Alto. Because we have no plans to upgrade for the time being, can anyone tell me in what state my device is restarted in the thi...

BuzzLin2 by L0 Member
  • 5439 Views
  • 1 replies
  • 0 Likes

prisma free trail using AWS PAYG

Hi Team, I have subscribed to prisma cloud PAYG 15 days free trail in AWS. I exceeded 15 days today. I don't want to continue using it and get charged. How do I unsubscribe it?

csekhar by L0 Member
  • 1204 Views
  • 1 replies
  • 0 Likes

API set up with global protect and infoblox

Hello Community, I hope i am in the right place to ask this question. I am working on building an API set up that will pull Global protect user information such as hostname, IP, etc... That data will then be fed into infoblox as our central dns source. Our previous rep had suggested: You can use two API requests to view and then disconnect a Gl...

ADefeo by L0 Member
  • 1270 Views
  • 1 replies
  • 0 Likes

Authentication Fallback

Hello,So, we currently authenticate administrators to our PA's via Radius (TACACS). Is there a way to configure the PA's that it will only use the local DB / Administrators if Radius isn't available? Thanks!

mrsold by Not applicable
  • 13152 Views
  • 10 replies
  • 0 Likes

Rule hit count or unused rule in custom reports or CLI

There are no fields related to rule hit count or any way to identify unused rules in Panorama custom reports. Is there a way to get a consolidated view of unused rules across all device groups at once and not just through the policy page per device group?

x2aembre by L0 Member
  • 2055 Views
  • 2 replies
  • 0 Likes

PA5410 Version 10.2.4 not allow to set offload to true

HelloWe are detecting sporadic CPU spikes on a FW 5410 version 10.2.4 , the average is fine however, we observe sporadic spikes of 95% 96% ...100%. Before with the old FW model we did not have this problem and we have not changed any configuration. When I try to change the session offload to True it does not allow me to do so.admin@X> show se...

Alpalo by L4 Transporter
  • 2136 Views
  • 2 replies
  • 0 Likes

SNMP Looking for a Table on 5020's that shows VPN tunnel status

We have a VPN tunnel and would like to know if there is an SNMP table that can be polled for the status of the tunnel being up or down. We are aware there are traps that provide update when the tunnel goes down. However, we are looking to establish a timed monitoring check that requires polling an SNMP table that would contain that data Does...

runatyr by L0 Member
  • 1322 Views
  • 1 replies
  • 0 Likes

PAN-229942 fix version 10.1.12 and 11.2.0 release estimation date

Hi Support, we recently upgrade PAN-OS version 10.1.10-h1 but encounter issue error message "timed out while getting config lock" then we have confirm with Palo alto TAC engineering team that this issue cause by bug PAN-229942 and the fix version PAN-OS version 10.1.12, 11.2.0. but not sure the date of the release yet. Kindly please let us k...

Support account with personal email?

Purchased a 440 lab unit for my personal lab through my previous employer who is no longer in business (and inaccessible email) so I need to now register it with my own personal email but am having trouble. Trying to study for PCNSE after getting my PCNSA. I’ve seen it done for others in the past but I am not sure I am going about it the corre...

VK9H13 by L2 Linker
  • 1660 Views
  • 1 replies
  • 1 Likes

Upgrade VM-Series model - VM100 to VM300

Hello. I have as a goal to upgrade the palo alto firewall from VM100 to VM300. I am in a process of understanding the process, so I am wondering if I could get some assistance from this forum. Thank you in advance. Going through the guide Upgrade the VM-Series Model (paloaltonetworks.com) I see at STEP 2, under A point Make sure that you are...

alwi by L0 Member
  • 1856 Views
  • 1 replies
  • 0 Likes

Cloud Identity Engine

While attempting to synchronize an on-premises server with Cloud Identity Engine, we encountered the following error Confirm the domain name configured on the agent matches the Canonical Name of the domain controller to ensure Cloud Identity Engine can retrieve the NetBIOS name. A derived value (xyxyxyx) is used instead.Action: Change AD contr...

Screenshot 2023-05-24 221725.png
Screenshot 2023-05-24 221635.png

VPN Site-to-Site Private IP and Public IP

VPN Site-to-Site Private IP and Public IPGood afternoon everyone, is it possible to set up a Site-to-Site VPN between a site with a Palo Alto Private IP and a Palo Alto Public IP.Site Privado: PaloAlto---IpWan-192.168.1.254---Router/Modem--------Internet-------Site Publico:IPWan:190.100.100.200Thank you very much for your help and support, I rem...

Metgatz by L4 Transporter
  • 8817 Views
  • 7 replies
  • 0 Likes
  • 24374 Posts
  • 124 Subscriptions
Top Solution Authors
Top Liked Authors
Labels