General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Updating the HA configuration in large hops.

Hello community

I am upgrading a PANOS 8.0.7 to version 9.1.14-h1

I would like to know if in the transit versions, you download and install only the base 9.0.0.0 or is recommended to download the base 9.0.0 and install the recommended 9.0.16-h2
fo

...

PAN-DB is not connect to cloud

DB Cloud is not connected as i have 9.0.3h3 version. And this command is also not running. Please suggest

request url-filtering download paloaltonetworks region <region_name>

Command user group name not working

Hi,

We just check that the command: show user group name 'cn=......' has this output:

user group xxxxx does not exist or does not have members. All config is OK.

If we run "show user group list", i can see al the groups, but filtering by one of the

...

Issue with VXLAN traffic passing through the firewall

Hi Team,

We have an SDWAN box placed behind the firewall and the SD_WAN box need to communicate with the controllers which is located on the internet.

The topology is given below:

SD_WAN Box<--->F/W LAN interface<--->F/W ISP interface <--> Internet <

...

Resolved! Sinkhole vs whitelising url

Does the sinkhole take precedence over whitelisting? We whitelisted a url and are sinkholing parked categories. I can request to have the category changed, but was not sure which took precedence.

0day padding oracle exploit on PAN-OS master key decryption?

Ran across this and am wondering if this is truly a new 0 Day or related to a previous RCE from a little while back regarding the default Master Key? https://twitter.com/rqu50/status/1554566757704089600 There is proof of concept code for this.

Resolved! Always on GP Using Local CA for Prelogin and SAML Auth

I am building and always on VPN with Prelogin (both windows and MAC) and SAML authentication. Everything works as expected with PC computers. With the MAC computers, we see the Prelogin connection, Then it is supposed to switch to user authentication

...

office365 uploading App-ID not recognized error

Dear Team,

There is a symptom that the office365 application is not recognized correctly.

For example, if you connect to the office WEB (office.com) and create powerpoint and word documents, they are recognized as 'ms-powerpoint-online' and 'ms-s

...

PA in Azure intermittent connection

Hi,

Newbie here for Palo Alto and thanks in advance for any help/comments. We have a customer who has a PA-220 on-prem for their internet and PA in Azure for their cloud app server. Internet is working fine in their on-prem and has a Site-to-Site v

...

Palo Alto - Barracuda IPsec VPN problems

We've a IPsec-VPN IKEv2 between Palo Alto (10.0.7) and Barracuda (8.0.5-0341) with 10 IPsec tunnels, one VPN-tunnel per subnet-pair, on Palo side "proxy IDs".

At least once every day, some of these ipsec-tunnels go down and can only be forced to come

...