General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Action and Session End Reason conflict when SSL decryption enabled

Hi, SSL decryption was turned on for one of the inside servers. Although it looks good, but some of the logs are rather strange.There are sessions like these:Basically Action - Allow, Rule is hitting correct one (the one permitting the traffic), but Type is Deny and Session End Reason is policy-deny. That looks false to me and it seems that tra...

PA-440 Cannot load licenses/auth codes/key into device

My PA-440 will not Retrieve license keys from license server. I made sure the server addy and DNS was set correctly. I am not using the ZTP WAN port currently, while I have it in our lab. I have 1/3 setup as outside facing to ISP and 1/4 setup as local LAN that I can access the internet, successfully on. I have tried under License Management...

Resolved! Palo Alto CSP Down

I go to support.paloaltonetworks.com I can access to the case I open but I cannot access to the case or open new case. It stuck in loading . I tried with multiples browser and internet line also same issue. My colleagues have the same issue also

Resolved! Site to Site VPN 1 GW multiple peers Same VPN network

Hi, Looking for your advise and best practise for setting up a site to site vpn with one GW and multiple peers. VPN IP addresses are from the same subnet. Services behind the GW1 should be accessible be each pee and vice versa. However, each peer should not be communicating to each other. Is this possible? if yes, is there a guidelines on ho...

Resolved! DHCP configuration

Hello all, Our branch office is using PA820 as a DHCP server with all of our devices into a single vlan. We would like to keep the devices into different vlans with different subnets. My question is how to configure the DHCP to assign a specific subnet to a specific vlan (switch)? Please help!! I am new to this product. Thanks

A log of the export logs

For some reason the exporting of the logs to an FTP server is failing. Are there any log files anywhere that would give me any info? Thanks

Resolved! How to use Office365 as email gateway

Hello, We have PA-220 with PAN-OS 9.1. Do you know if it is possible to use our O365 tenant as an email server? I have tried a few configurations but no success 😞I am sure that I am using the correct Emal gateway but I do not see where I can fill in the account's username, password, and TLS configuration.

how dose globalprotect ios download?

I want to download Global Protect for iOS mobile. Not the one on the Apple Store Is it right to download the OS X agent?

Multiple issues on Dynamic Updates PA-220

Hi Palo Alto Community Team, I'm facing Multiple issues on Dynamic Updates PA-220, the thing is, in our company we have a PA-220 available and with active Premium Support license for all 2023, this FW was restored using factory reset process and get back to PAN-OS 8.0.7 and updated following the order 8.0.7 > 8.0.19-h1 The FW was update...

Changing palo alto from a/a to a/p

Hello, I need to change 2 palo alto from active/active to active/passive. Is there any guide or something that I can follow or understand what's need to be change. I already have changed but lost connection on my globalprotect, I can connect but looks like I don't have any connection internaly.

Resolved! VLAN Confusion

Hi,I’ve recently got a PA-440, and trying to make sense of the VLAN logic on PAN-OS has got me stumped.First of all, I get creating a layer 3 sub interface and assigning a VLAN tag, easy. A bit odd that the 'tag' doesn't then show up as a VLAN under Network > VLANs, but I can let that slide. It's an access port where things really don't mak...

Failed to send file device telemetry file _1-hr-interval_HOUR.tgz

I'm wondering if anyone else is seeing failures during the uploading of telemetry files today?Our first failure occurred at 10:38 PDT and has been reoccurring every hour since.I see via https://status.paloaltonetworks.com/, that wildfire is in maintenance... related?

Network Traffic Categorized as Malware

We are seeing an uptick in normal network traffic being classified as malware. Example sites include nasdaq, vice, and times. One thing they have in common is that the dest IPs points back to leaseweb. Is anyone else seeing this or know of a change that could be causing this?

panorama email schedul - no match data

Hi. panorama email scheduler > no match data Regarding the above content, we found a solution that we can activate debugging of search results. https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLc4CAG admin@M-200> debug management-server set report basic Invalid syntax. In url, panorama is written in the ...

Resolved! deleting report tree [folder where the reports are ]

Hi is that possible to delete report tree folder where the reports are for example this command (delete report summary scope shared report-name "pdf_summary_report" file-name *) removes the pdf files (reports) inside of [pdf_summary_report] tree/ folder whichever you call it, however the folder itself stays in gui and cli admin@PA-440>...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Action and Session End Reason conflict when SSL decryption enabled