General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! PA-220 Reboot

Hi Team,

Firewall got rebooted instead of generating a tech support file can we do any other troubleshooting to check why the firewall was rebooted. If i generate the tech support file i have to go to Palo to check what it is and wait till i get the

...

Resolved! PA 500 Cisco 3560

Hi there,

I am totally new here in Paloalto firewall. I have PA 500 and want to do lab test and I want to find a basic instruction to set up PA to connect internet and also connect to Cisco switch. I am very familiar with Cisco ASA and switch since

...

Resolved! IPSEC Tunnel to ASA - PeerID issues

I am setting up an IPSec tunnel to an ASA. I am getting an error message about the PEERID type only allowing IP but received FQDN. Per the other KB article, I changed the PAN Exchange mode to Aggressive.

Now the PAN received a FQDN of the ASA side an

...

Newly registered domains

Occasionally we run across newly registered domains that we either know or believe to be non-malicious and that we need immediate access to. Newly registered domains are blocked by the Palo Altos - is there a way to flag specific newly registered do

...

Exporting all the rules and sub rules

I have been tasked with exporting all the rules from our Palo Altos for monthly review purposes.

Panorama has shared rules as well as rules in each device group. Our firewalls have rules on them as well.

Support suggests using the PDF/CSV option

...

is it possible to limit the number of devices from which the a user can do the captive portal login?

is it possible to limit the number of devices from which the user can do the captive portal login?

Thanks for you prompt response

Vwire

Vwire is introducing latency please help me. by using vwire we are observing 80 ms of latency.

URL filtering for a School

I am using a Palo Alto 500 to filter url content on a school network. I have blocked streaming media but some sites like college humor still go through. How can I block all streaming video, also I would love to able to block flash games. I am new at

...

Power Adapter

Can you help me with some photos or the datasheet of the 150W and 50W AC power adapters?

ION 2000 Physical Memory low

ION 2000 Physical Memory low, how to verify the resource utilization

ION2000 controller connection failed "Analytics" not connected

Ion# debug controller reachability controller
TPM and tcsd process is running fine
Mic cert check passed
Cic cert check passed
Mic cert verify passed
Cic cert verify passed
CIC cert connectio

...

Resolved! vulnerability block action

Hi,

when creating a profile choosing block action is seen as "reset-both" on the logs.

is that normal behaviour or not ? Thanks.

syslog udp session keep alive ?

When forwarding logs, they are being sent to udp 514. The udp time out is 30 seconds, and the syslog server actually receives packets every 5 seconds. However, I wonder why the firewall keeps the session longer than 30 seconds. When the time is lon

...

Resolved! IPSEC Tunnel down on GNS3

Hi- I am trying to implement exactly this article for ipsec - https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK

However the tunnel is not coming up, I am not sure if its gns issue or my configuration?

Wireshark packe

...

failing back to primary FW and short loss of ISP connection

Good evening,

Tomorrow I'm cutting over a new pair of 3410's. I have 3 LAG connections (AE.1, AE.11, and AE.10). AE.11 is the physical connections to my ISP switch. There are two L3 sub interfaces (VLAN 800 & 801). VLAN 800 = ISP1 and VLAN 801 = ISP2

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help