General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! need auth code applied to serial number 01351002139

PA-220 Slow Response time connecting over ipsec tunnel to AWS.

I've read on here multiple posts, older and newer but I think part of my issue is that I'm new to this environment and I'm hoping for a bit of guidance. I took over 4 sites with PA-220 firewalls which were way out of date, I've just got them to 10.0.

...

Global Protect PanGPS Service is Missing

Global Protect VPN is no connecting to the server and the PanGPS services is missing, I did the following procedure https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm5eCAC&lang=en_US but it didn´t work, the Global Protect C

...

Cortex XDR Agent

Hi,

I'm noticing that Cortex Agent is giving me High RAM usage in all endpoint

Cortex XDR

Action and Session End Reason conflict when SSL decryption enabled

Hi,

SSL decryption was turned on for one of the inside servers. Although it looks good, but some of the logs are rather strange.

There are sessions like these:

Basically Action - Allow, Rule is hitting correct one (the one permitting the traffic), but

...

PA-440 Cannot load licenses/auth codes/key into device

My PA-440 will not Retrieve license keys from license server. I made sure the server addy and DNS was set correctly. I am not using the ZTP WAN port currently, while I have it in our lab. I have 1/3 setup as outside facing to ISP and 1/4 setup as

...

Resolved! Palo Alto CSP Down

I go to support.paloaltonetworks.com I can access to the case I open but I cannot access to the case or open new case. It stuck in loading .

I tried with multiples browser and internet line also same issue. My colleagues have the same issue also

Resolved! Site to Site VPN 1 GW multiple peers Same VPN network

Hi,

Looking for your advise and best practise for setting up a site to site vpn with one GW and multiple peers. VPN IP addresses are from the same subnet. Services behind the GW1 should be accessible be each pee and vice versa. However, each peer s

...

Resolved! DHCP configuration

Hello all,

Our branch office is using PA820 as a DHCP server with all of our devices into a single vlan. We would like to keep the devices into different vlans with different subnets. My question is how to configure the DHCP to assign a specific su

...

A log of the export logs

For some reason the exporting of the logs to an FTP server is failing.

Are there any log files anywhere that would give me any info?

Thanks

Resolved! How to use Office365 as email gateway

Hello,

We have PA-220 with PAN-OS 9.1. Do you know if it is possible to use our O365 tenant as an email server? I have tried a few configurations but no success 

I am sure that I am using the correct Emal gateway but I do not see where I can fill in

...

how dose globalprotect ios download?

I want to download Global Protect for iOS mobile.

Not the one on the Apple Store

Is it right to download the OS X agent?

Multiple issues on Dynamic Updates PA-220

Hi Palo Alto Community Team,

I'm facing Multiple issues on Dynamic Updates PA-220, the thing is, in our company we have a PA-220 available and with active Premium Support license for all 2023, this FW was restored using factory reset process and ge

...

Changing palo alto from a/a to a/p

Hello, I need to change 2 palo alto from active/active to active/passive. Is there any guide or something that I can follow or understand what's need to be change.

I already have changed but lost connection on my globalprotect, I can connect but look

...

Resolved! VLAN Confusion

Hi,

I’ve recently got a PA-440, and trying to make sense of the VLAN logic on PAN-OS has got me stumped.

First of all, I get creating a layer 3 sub interface and assigning a VLAN tag, easy. A bit odd that the 'tag' doesn't then show up as a VLAN under

...