General Topics

Discussions

Sorted by:

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Failover but Cannot access WebGUI

Hi All,

I tried to upgrade the Palo firewall HA (Active-Passive). But when I failover active to passive, we cannot access the GUI on both firewall. Before I failover, I check the passive cannot reach to updates.paloaltonetworks.com.

After I fail

...

Resolved! What happens when a base image is deleted from PAN OS

Hi All,

My colleague deleted the base image 10.2.0 whilst being on the 10.2.3-h4. There is no issue with the device (VM series).

Is this a normal practice? Will it ever effect the working of the firewall?

FYI: This was an attempt to clear the root p

...

PA-220 console is blank

I received a PA-220 to set up at work. When connected to the console (USB-C cable), I'm only seeing a blank screen. I'm using 9600 speed and 8-N-1 but nothing shows up.Even if I reboot the device, nothing appears while it is booting up.

Resolved! Google Chrome Geolocation

Hi, we have been experiencing a strange problem and not 100% sure if it is the Palo causing this. We use 2 ISP's and BGP, and have confirmed that our Geolocation is accurate, however when accessing google.com and using any map site including google

...

Resolved! Is it possible to monitor average/min/max latency to Global Protect clients connected to a PAN 3220 or VM PAN?

Is there any means in the PAN admin portal to see what the average latency is to GP clients? The 10 highest latency GP clients?

Resolved! High Availability Commit Failure on PA-5220

I am having trouble trying to get a PA-5220 to commit, when attempting to configure HA1, not on the

ha1-a default interface, but rather on aux-1. The same applies when configuring HA1-Backup to use aux-2.

I can commit with this config, under high-av

...

Cortex geolocation ip error

Hi team,

Cortex is erroneously geolocating IP addresses, although the FW itself locates them correctly.

Can anyone help us how to proceed?

Regards

Global Protect Hip check doubt

Hello,

We are implementing HIP for our company, the case is that we already have several HIP objects and profiles working properly.

My question is, if we have identified a machine that does not pass the hip check as we want, is it possible that the v

...

User mapping - IdleTimout and MaxTimeout architecture with GlobalProtect only (no User ID agents)

We have a setup for up to 2.000 employees. Every employee has the GlobalProtect installed, but we are not using any User ID agent.

We have only one portal configured, for both internal and external (vpn) connections.

On both gateways (internal and exte

...

Scheduled report Mail missing attachment

Hi team,

I have configured, Scheduled report but I am missing with the attachment for predefined report. I am receiving mail without attachment for one report. Any Idea what could be the issue ?

convert configuration from set syntax to xml

dear community,

please help with any idees how can convert a config file with "set" syntax into xml format.

i know that i can extract the config direct in xml format  i need this solution to migrate some configuration that care only available

...

Failed to renew device certificate

the device certificate is going to expire end of march.

My PA trys to renew it and comes up with the following error:

Failed to renew device certificate.Failed to send request to CSP server.Error: No OCSP response received(dest => 35.238.43.180)

I h

...

Tacacs+ Cisco ISE config

Does anyone know how to configure the cisco ISE side? We can use tacacs now to access the gui but only local usernames and passwords work when trying to access the CLI using SSH. Does anyone have a complete cisco ISE setup? I found a guide to set up ...

PAN-OS 8.0 HA A/S Cluster MAC Flapping

Is anyone else experiencing MAC Flapping with an A/S Cluster running PAN-OS 8.0?

When one of the firewalls is rebooted and goes into the HA passive state the network detects a network loop because of MAC address flapping between the Active and Passiv

...