General Topics

Where to download update for PA-2050 for learning purposes.

I have been given a PA-2050 to play with, and get my hands dirty, learning PAN, etc.

Where do I go find the latest supported image for it?  https://support.paloaltonetworks.com/Updates/SoftwareUpdates/ doesn't have the PA-2000 series listed.  It has

Re: Welcome to LIVEcommunity! Start Here.

Olá @Marcos1991 

Algo que pode testar é a liberação de portas de VPN udp, já precisei em algum momento utilizar-se disto.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/reference-port-number-usage/ports-used-for-ips

Days remaining till password expires

Is there any way to see the number of days remaining until a users password expires?

User cannot connect to Global protect portal.

The error message on this users GP client says they have an issue with they're certificate. The helpdesk apparently installed a certificate but I am not sure which one or where exactly. Now its telling me it cant access the portal at all. I want to d

Last Fetched Message Failed to renew device certificate. Invalid request. Authentication failed

Hi,

I have PA-410 (10.3.2-h2 sw.ver)

showing error "Last Fetched MessageFailed to renew device certificate. Invalid request. Authentication failed" renue option not available .

any solution, please help me

Thanks ,

#PA-410

Bureau of india standard certificate AKA BIS certificate

Hi All,

Any folks aware of Bureau of india standard certificate AKA BIS certificate and do know where can i get it ?

Global Protect on Linux not working

I've tried GP on both Ubuntu 22.04 and AlmaLinux.I got the GP app from University of Texas at Dallas.
Neither worked. I got a SSL Handshake error.
Anybody with a successful experience to share?

Cheers

Global Protect on Windows 11 Home edition ARM Processor

Hi,

I've installed Global Protect last version 6.1 omn Windows 11 Home Edition with ARM Processor. After insert the portal it stop to run. Anybody has found similar problem?

warning msg on CLI

Re: Welcome to LIVEcommunity! Start Here.

Olá @Marcos1991 

Sobre as VPNs, as polices estão criadas para permitir comunicação entre as zonas de segurança? Há NAT de saída para "Internet"?

Vejas se estas docs lhe auxiliam:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g00000

Changing interfaces

What are the steps to move the global protect VPN portal and gateway from one interface to another on the Palo Alto firewall?  We are wanting to move it to it's own interface.

SSL inbound inspection

We want to apply inbound SSL inspection and our certificate from Digitcert and based on this document
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEZCA0
there is a note says "Because SSL certificate providers such as Ent

Re: Welcome to LIVEcommunity! Start Here.

Opa, estou conhecendo mais sobre Palo alto e estou com uma dificuldade para fechar vpn ipsec no meu LAB.
A vpn nao fecha.

PA-A
ETHERNET1/1
Local ip - 100.0.0.1/24
Peer - 30.0.0.1
Rede local - 10.0.5.0/24
Rede Remota - 10.0.4.0/24

----------------------------