General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

What'sapp web execution process need to block all the endpoints globally.

Hi Team, in our organization has a requirement that WhatsApp web execution process to blocked globally. kindly let me know your suggestions.

linux server Ubuntu 22.04 machine agent version 8.1.1.112729 not getting upgrading. may i know the reason?

Hi Team, we have Linux servers Ubuntu 22.04 tried to upgrade the agent's latest version 8.1.1.112729. but unfortunately getting failed multiple times. so may i know the reason and solution for this issue.

Resolved! License for feature lcaas expired on 2023/09/0!

system log display "License for feature lcaas expired on 2023/09/0!" what meaning is this ?

Wildfire uploads: cancelled - by DP, smb out of order detected

Dear Community! While checking the Wildfire uploads, I see that many uploads of ms-office files are cancelled with the following log : ms-office cancelled - by DP, smb out of order detected Does anyone know what´s the reason of this upload being cancelled? Thanks!

Resolved! URL Category/Category List block and allow behaviors

I'm having an interesting issue where I've set up block action on almost all of the URL categories on a specific filtering list, including the risk categories. I've allowed three specific categories such as education, computer and info, and training and tools. Looking at the logs, I'm still seeing blocks. What I've noticed is the main catego...

Resolved! SSL routines::unsafe legacy renegotiation disabled

Hi, We are getting an increasing number of users reporting issues connecting through the Palo Altos when using OpenSSL3. Here is the information I have: "We've got someone working on moving to Node-18 from 14. We're getting issues in the build pipeline where OpenSSL3 is failing to connect through the proxy. We get the error unsafe legacy reneg...

Resolved! Issues with CHATGPT

I'm experiencing an issue where the CHATGPT login page is not loading everything in correctly and it's preventing our internal users from being able to sign in. I checked the network tab under the dev tools for my browser and saw that there were several items that were erroring out with the " 503 service unavailable" error. Could someone please ...

Palo alto network HA link monitor failover Monitor Fail Hold Up Time

Palo alto network HA link monitor failover Monitor Fail Hold Up Time Hello good afternoon, thank you very much for your usual collaboration. I have a question, regarding HA Links monitor timers. When one has configured a track or HA Link Monitor, some interfaces, checking the HA timers, the one that corresponds is: Monitor Fail Hold Up Time ...

What do you people's think of this script?

I wrote a Python script that returns the differences in policies across firwealls. here's the github description: Firewall policies contain object groups, hundreds of ip addresses and ACL's, services, address objects etc. This script compares a set of firewall policies with the same name, across many firewalls, and return differences in servic...

Malicious requests from 65.154.226.XXX to our service

Hello, We are hosting a cloud solution and we have identified a increased amount of malicious requests all originating from 65.154.226.XXX IP ranges. Most of them coming from 65.154.226.126, 65.154.226.220 and 65.154.226.100. It turns out these IPs originate from paloaltonetworks.com, that is why I am posting it here. According to AbuseIPDB thes...

Resolved! Ownership & Support Transfer?

Hello, I recently purchased a PA-220 off of eBay for training purposes. The device has support through 30 June 2024. What is the process to transfer ownership of the device and support to me? I bought the device from an e-waste recycler; I don't know who the original owner was. Cordially, Rob

Resolved! PA Firewall VM series | interface suddenly goes down

Hi Team, We have a PA VM firewall where all working well but firewall interface (eth1/1 and eth1/2) went down suddenly No issue with the management interface so we are still able to access the firewall during the incident time. to brings the interface up, we do reboot on firewall and thus fix the problem. From the system log, we can see "li...

Resolved! VM-300 Software Update

Hi All, I'm looking to update my VM-300 firewalls from 10.1.5-h2 to 10.2.5 I've tried to work out the install steps but I'm a bit confused, I assume I need to do the following? update from 10.1.5-h2 to 10.2.0 then update from 10.2.0 to 10.2.5 Also, I assume the link below is where we go for preferred release guidance? Support PAN-OS Software ...

Resolved! Static NAT with Port Translation

Dears,I'm migrating some NAT rules from Cisco ASA to PAN Firewall. I don't know how to migrate a static NAT with Port Translation like the follwing example: static (dmz,outside) tcp Public_IP 443 Private_IP 80 netmask 255.255.255.255 this static in ASA means the outside connection will be directed to the public IP and the port of 443 and ASA wi...

LSVPN Satellites unable to sign-in to the portal after upgraded to PAN OS 10.1.2

Hello, We have upgraded the PAN OS to the latest version 10.1.2 on 3 of 5 PA firewalls, including the LSVPN portal, and 2 of the satellite firewalls.The thing is that 2 of the satellite firewalls with the latest PANOS 10.1.2 are unable to log in with the portal.Auth Method: Satellite Auth CookieError (Portal Side): cookie is invalid and no usern...