General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Can I ask a msg as a public domain email address customer?

Resolved! Possible to have a web page presented for webistes where SSL decryption Doesnt work?

Hi All,

We use SSL inspection and sometimes we have to add websites to a custom url category for non inspection so the webpage can become visible. Is there an option to have the user presented with a webpage so IT staff will know that it's ssl inspec

...

EDL error web request failed to complete, error:28

Using EDL provided by https://saasedl.paloaltonetworks.com/ but getting error web request failed to complete, error:28

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information...

Resolved! URL Overide SSL Cert

Palo Team,

For URL override, do you need to use an SSL Cert signed by an internal CA? Or can I use an SSL from a public authority like Go Daddy?

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRdCAK

Change the SSL/TLS server configuration to only allow strong key exchanges. Key exchanges should provide at least 112 bits of security, which translat

Ho w to disable Weak SSL/TLS Key Exchange on Palo Alto Firewall while connecting with Globa lProtect VPN

Resolved! suspicious user account and file in my system

Is this BOT or not ?

# cat /etc/passwd | grep trapsanalyzer1
trapsanalyzer1:x:993:990::/home/trapsanalyzer1:/usr/sbin/nologin

# chage -l trapsanalyzer1
Last password change : Jul 13, 2020
Password expires

...

Is Palo Alto firewall vulnerable to CVE-2022-42889 (Apache Commons Text Code)?

Hi,

Is Palo Alto firewall vulnerable to CVE-2022-42889 (Apache Commons Text Code)?

Regards,
BK

Resolved! PA-460

Hi Team,

Please share me the EOL and EOS link for all the device models. I dont see the model PA-460 in the below link.

https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates

Regards,

Sanjay S

After firewall upgradation to 10.2.1 packets are dropping and outage

SSL Decryption Exception - Password Managers

Has anyone setup an SSL Decryption exclusion list for Password Managers (i.e. BitWarden, LastPass, 1Password, etc)?

If so are there any tips or resources you could point to.

Palo Alto BGP: Conditional Advertising

Dear All,

Recently we have been migrating to a non-trivial BGP setup, and I have had to experiment with the conditional advertising BGP feature in Palo Alto. I was familiar with this concept from cisco, but alas I still found the documentation availab

...

HA Active/Standby HA-1 and HA-2 Ip addressing

The training videos say

HA1 1.1.1.1 <-> 1.1.1.2

HA2 2.2.2.1 <-> 2.2.2.2

do there addresses ever get place in the Routing table , RIB, VRF or Vwire?

I wish to avoid any issue where people cannot route to cloudflare 1.1.1.1 or other conflicting

...

Policy Based Forwarding is not working for Secondary ISP

We recently added a new Internet link to our PA-3020. We want only one server (10.1.12.130) to use it, so we configured the new internet link interface as layer-3 , assigned it a static IP, created a PBF policy that basically specifies the zone (i

...