General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

How to disable cortex xdr on home computer

Hi, cortex xdr was instaled on my computer and now i dont have acces to my network, i tried everything but i cant disable cortex.

can somebody help me to disable and uninstall this program?

How can I delete my account on Live community?

Hi! I would like to delete my account from Live community cause I used the wrong email account, what can I do for delete this account?

How to identify long live session(s) ?

Hello,

I am trying to identify those long live sessions on my firewall, I mean those session(s) that never ended for weeks at a time.

This is what I found out so far.

1. I can't export the whole session log to perform offline analysis,

2, I did not

...

Reverse Proxy

Can the PaloAlto do reverse proxy like ISA can?

If I have an internal web server hosting multiple sites how do I publish that through the PaloAlto?

I have a 440 with no internet access. I could not find documentation on the proper way to update the CRL when my firewall does have access to the internet. Thanks for any help that I might be able to get with this.

Resolved! App Identification and ALLOW rule - does this make any sense?

Attached is a screenshot of a rule that is ALLOW'ing ICMP, IKE, IPSEC, PING. Can someone explain why SSL is in the APPS SEEN list? I don't see where any of these applications have an implicit allow for SSL/443 trafffic yet if I read this right it i

...

Resolved! NAT

Hi Team,

Is there any way to get a history of when NAT oversubscription dropped packets/sessions? Or can I only get realtime data on that?

Network blocking and detecting capabilities in case of similar abnormal symptoms traffic

Hello all,

Hope you are doing well.

Our customer who is using PA3220 experienced external public IP blockage due to abnormal symptoms traffic.

Upon investigation, it was found that a test Linux server installed internally attempted SSH brute force at

...

VPN Monitoring "tunel-status-down[up]"

Model: PA450

OS: 10.1.8

ipsec-tunnel is working well.

The corresponding logs are continuously occurring.

I don't know if it's because of the tunnel monitoring option.

Resolved! Honeypot - block IPs

We are looking at creating a Honeypot Website. The idea is to set it up with a much more restricted vulnerability profile so when hackers are scanning for certain vulnerabilities in the low and informational category their IP is blocked. The question

...

Dual ISP VPN failover with single VR

Hi All, looking for some assistance to configure VPN failover for DR/BCP.

I've attached a basic diagram below

Currently, static route monitoring is set up on the outside interfaces of the firewalls at Site A, so if upstream from Site A ISP 1 fails Si

...

disbale anti tampering

how to diable anti-tampering on mac and Linux

Use Cases - Autotagging - Using Dynamic Groups

Hello Live Community, good afternoon, thanks for your time and comments.

About automating and anticipating some possible blockages and denials using Dynamic Groups - Autotag can you support me and comment me with some use cases ?

Also, if

...

Resolved! Prisma direct access to Azure

Hello,

I connect from home via Prisma to on-prem. I have a few domain controllers setup for pre-logon etc.

- what if my domain controllers were all offline or the firewall was offline

- can i have a domain controller in Azure

I have setup a site to

...

Resolved! what does "SWITCH" in hardware architecture mean?

One of my customers is using PA-3020 and thinking about replace.

When I comparing following diagrams, I have one question.

PA-3020 has dedicated "signature matching", "security processing", and "network processing" as below

Compare to above, PA-

...