General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! GlobalProtect user in RDP login?

Anyone know why, after installing Globalprotect, I see an empty user account with the GlobalProtect icon as an option when trying to RDP to remote desktops? I've noticed it on every machine after installing GP... I'm hoping it is a config option tha

...

I really need to be able to open up support tickets

Message boards and communities are not going be sufficient for our day to day needs. It has become impossible to actually open a support case. I need detailed instruction on how to open a support case that connects me with a live person.

Moving rules and objects between VSYS (device groups) in Panorama

I am trying to move security rules from one VSYS (or rather device group) to another VSYS in Panorama. It fails when I try to use 'Move' in GUI because objects (addresses, services) are not moved yet. But when I try to move objects I can't because th

...

Resolved! Firewall Reboot with Some Critical Comments

Hi everyone,

Devices get restarted suddenly with critical comments. Firstly DP restarted and after that system restarted. I will share the critical comments that are from autoassistant. We faced with this issue 2 times. For the first one; TAC engin

...

Resolved! Blocking DNS-over-https

Hi,

I plan to create security policy rules to block dns-over-https and dns-over-tls. Is it also recommended to block dnscrypt?

In regards to dns-over-https. If the browser attempts this and fails, does it fallback to using the client's configure

...

Resolved! Disable ciphers

Hi guys,

Would like to know how to disable the following ciphers:

TLS_DHE_RSA_WITH_AES_256_CBC_SHA
TLS_DHE_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_128

...

What is the range for sequence number in userID logs ?

What is the seqno field in userID logs(below link) ? What is the range for that? Will it rollover when it reaches the maximum ?

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/monitoring/use-syslog-for-monitoring/sysl...

User-ID

UserID Monitored server (WinRM-HTTP) gets Kerberos error.

Hi,

We tried this: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/user-id/map-ip-addresses-to-users/configure-server-monitoring-using-winrm

It seems like config is OK but we are getting "kerberos error" in status ofr this server monitored. W

...

PCNSE certification

Spoiler

Hi All,

I am looking to certify myself with PCNSE certification. Is there any active promo/vouchers for discounts available?

Pls suggest.

Hi All, I am looking to certify myself with PCNSE certification. Is there any active promo/

...

Software End-of-Life policy vs end of support

How long will a software listed as end of life ( https://www.paloaltonetworks.com/services/support/end-of-life-announcements/end-of-life-summary ) be supported? I have read conflicting information on this.

I suppose support could be defined as:
1) Rec

...

Reading counter flow errors

Hi All,

Apologies as I am still new and trying to learn Palo Alto. I encountered an issue wherein a new switch is causing a large number of packet drop parse. I found it on the IP below. How do you interpret the logs generated?

The 10.5.4.10

...

Prisma Cloud CWP reports of vulnerabilities which we have remediated or Patched Should be tracked...!!!

Prisma Cloud: CWP vulnerabilities reports, which we have remediated or Patched Should be tracked...!!!

This will be really helpful when it comes to auditing.

#EnhancementRequest

#FeatureRequest

Unable to categorize my companies URL

Hi,

I am unable to categorize my companies URL on behalf of one of our customers, that uses a Paloalto firewall.

My colleague received the following message when attempting to perform this action:

"In the meantime, Palo Alto Networks URL Filt

...

Migration Issue from PA-500 (HA-Active/passive) to PA-3220 with HA-Active/Passive

Hello,

Hi Brothers,

Existing PA-500 (PAN-OS 8.1.17) and New PA-3220 (PAN-OS 8.1.17)

I tried to export the running config from FW (PA-500) as XML format and import it into the new FW (PA-3220)

Shows me a lot of error and warning as there is a

...

Resolved! QoS Configuration Subnet /32

I have followed below link to configure a QoS setting for testing purpose.

Configure QoS (paloaltonetworks.com)

I have specify only 1 ip 192.168.1.x /32 in QoS profile and also tried to specify in the interface clear text traffic.

In the result t

...