General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! PA is connected to a router

Hi PA(non-management interface) is connected to a router via a cable . What is minimus condition for the two device to ping each other?

1. ip address in interface are in same subnet,

2. interface associated with management profile to allow ping

3.

...

Resolved! CLI configuration of adding interface to virtual router

Hi,

When add a interface into virtual router using cli, do I need to copied all the interfaces in the virtual router currently, then add this new interface into the list?

For example, current default virtual router has two interface ethernet1/1 and

...

Encrypted-DNS False Positive Heads Up

Presently 20230406.20033 and earlier updates are presenting a large number of false positive categorizations for encrypted-dns. This includes several domains from Bitwarden, YouTube, Google, Microsoft, Spotify, and many many others. If you have encry

...

Resolved! L2 Over L3 with VXLAN protocol

Hello,

Is it possible to configure a VXLAN tunnel on a Palo Alto 3220 (running PANOS 10.2.3)? I.e. is L2 over L3 tunneling using VXLAN protocol possible? If so, is there an example configuration you can point me to?

Thanks!

blocking apps on google chromecast

Hello,

Looking to block apps on a new Google Chromecast all apps would be great but haven't been able to block AppleTV, HBOMax and ESPN. I've put appletvplus and hbo into our blocked apps rule but they still open and able to be accessed.

Any one

...

Where to download update for PA-2050 for learning purposes.

I have been given a PA-2050 to play with, and get my hands dirty, learning PAN, etc.

Where do I go find the latest supported image for it? https://support.paloaltonetworks.com/Updates/SoftwareUpdates/ doesn't have the PA-2000 series listed. It has

...

Days remaining till password expires

Is there any way to see the number of days remaining until a users password expires?

User cannot connect to Global protect portal.

The error message on this users GP client says they have an issue with they're certificate. The helpdesk apparently installed a certificate but I am not sure which one or where exactly. Now its telling me it cant access the portal at all. I want to d

...

Last Fetched Message Failed to renew device certificate. Invalid request. Authentication failed

Hi,

I have PA-410 (10.3.2-h2 sw.ver)

showing error "Last Fetched MessageFailed to renew device certificate. Invalid request. Authentication failed" renue option not available .

any solution, please help me

Thanks ,

#PA-410

Bureau of india standard certificate AKA BIS certificate

Hi All,

Any folks aware of Bureau of india standard certificate AKA BIS certificate and do know where can i get it ?

Global Protect on Linux not working

I've tried GP on both Ubuntu 22.04 and AlmaLinux.I got the GP app from University of Texas at Dallas.
Neither worked. I got a SSL Handshake error.
Anybody with a successful experience to share?

Cheers

Global Protect on Windows 11 Home edition ARM Processor

Hi,

I've installed Global Protect last version 6.1 omn Windows 11 Home Edition with ARM Processor. After insert the portal it stop to run. Anybody has found similar problem?

Resolved! DNS over TLS in 10.2.4

Hi All

it seems like late last year DNS over TLS feature has been added to Palo Alto firewalls

However I am having issues understanding where it needs to be configured, I did read the guides but still unclear

So my external dns is 1.1.1.1 and I

...

warning msg on CLI

Hi,

While logged into the CLI on our PAN-OS, received the following error messages:

2016-07-20 12:17:16.783 +1000 Warning: pan_hash_init(pan_hash.c:112): nbuckets 100 is not power of 2!

2016-07-20 12:17:16.783 +1000 Warning: pan_hash_init(pan_hash.c

...

Changing interfaces

What are the steps to move the global protect VPN portal and gateway from one interface to another on the Palo Alto firewall? We are wanting to move it to it's own interface.

Discussions