UPDATE 11/8/23 11:43 a.m. EST:
LIVEcommunity’s System Update will be delayed. This means your use of LIVEcommunity will not be impacted this week (11/8-9), and you can proceed with business as usual.
Thank you again for your patience and stay tuned
...
We are excited to announce a new Engineering Blogs section on LIVEcommunity, exclusively curated by Palo Alto Networks engineers!
This dedicated area will be home to technical posts about Palo Alto Networks innovations to build scalable and reliabl
...
Did you know that you can help your fellow community members by accepting solutions when a reply answers your question Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature
...
Hello,
I have PA OS: 9.1.12 and it sends traffic and configuration logs to an external syslog server using custom logs with
CEF format . The traffic logs work fine but the config logs miss something .
here is the config logs ,
so as you can see
...
When I tried to activate the license with auth code it prompt me this error
" Failed to install licenses. An initial license cannot be applied for renewal of license"
The initial license is trial license, how should I remove the trial from portal ?
Tha
...
Hello Team.
Through the logs below we found a path monitoring failure and have a question to discuss.
#show_log_system.log
2022/05/05 11:03:36 critical routing defaul path-mo 1 Path monitoring for static route destination 0.0.0.0/0 with next hop
...
My pa-500 firewall switch was unpacked by my little son. He damaged the hard disk drive when I was not at home.
Now the pa-500 can't start up. How to solve it?
Hi,
I've got firewalls in active/standby mode and preemptive is not enabled. HA2 link flapped for around 12:47 PM GMT and link was up at 12:52 PM GMT
Model : 5060
Hi,
Looking for some guidance on our setup. I am looking to establish pure ISP failover without having to take action on my / my team's side. Presently when there is an outage, we need to do manual intervention to get connectivity back up.
Here is an
...
We have two 5250s setup active/passive. we have two vmware VeloCloud devices connected that have similar active/passive failover. VeloCloud 1 has interfaces mirrored by VeloCloud2...including the interface ip addressing. Palo does not like two interf
...
PA is using cisco switch as external RP. Over a system I start the stream on VLC but I don't see the multicast address in multicast FIB. System is connected to network that is directly behind firewall. I use this tool multicast test tool (https://com
...
We've done plenty of s2s IPSEC VPN tunnels between our DC firewalls and branch offices. I have a new branch office which we are configuring the same way as the others, yet the IPSEC VPN is not operating as expected. The tunnel is showing as up and th
...
Our organization has been struggling with getting MS AD security group changes to apply over VPN w/ prelogon enabled for a long period of time now. I have had support tickets in with Palo support and MS support. Palo support has determined via Global
...
Hi everyone,
We have defined Risk App block rule which contains the app by risk category, characteristics and vice versa.
After upgrading PA to 10.1.5-h1 version it starts to block ssl, web-browsing, google-base, whatsapp and other apps which are not a
...
Has anybody figured out an edl to allow communications to Okta without manually entering the whole list? My customer is using Okat for MFA and the Okta Portal uses a whitelist so they have policies that anything hitting Okta should use ip x.x.x.x.
...
Current panorama and log-collector issues
Panorama – mgmt. server only – SW-version: 9.1.12-h3
Log-collectors :
PAN02- – PAN03 – same SW version as Panorama
1.The summary log retention days did not change after the log storage allocation update
PAN02>
...
Hello
Is there a way to search a Domain in Minemeld with "contains" instead of "equals"?
As example:
We have entered *.blabla.com" in one of our Nodes.
I would like to search for blubb.blabla.com - which of course does not match.
Also "blabla.com"
...
Hi Team,
We have a SFTP server behind our firewall and its NATed to one of the interfaces of the firewall , we need to restrict the bandwidth to the SFTP server from Internet. When clients from internet connects to the server for downloading files
...
reaper
on:
GlobalProtect Android version 13 issue
reaper
on:
Replacing PA-5220 with a PA-3410 and need the best practice to migrate over configuration
aleksandar.asta
aleksandar.asta
reaper
on:
DNS Security cloud query timeout.
reaper
on:
cli "show" match case insensitive and pipe
Raido_Rattameis
