General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Palo Alto HA running config not synchronized .

Can you advice how to resolve this issues?

Fast boot PA-450

I have a firewall that for some reason after doing a version update to 11.1 is only taking 2 to 3 min to boot now. I noticed all the logs were not showing up and the interfaces was showing down, but everything was working. I decided to do a factory r

...

Resolved! Config Migration from Forcepoint

My project is to migrate 2 pairs of Forcepoint firewall to PA-440.

I have a Forcepoint config in XML. I

It is like to like migration without any changes.

How do I move forward with it ?

Resolved! Submit IP to known malicious IP or High Risk IP

Can an IP be submitted to Palo Alto to be included in the high-risk or known-malicious IP address lists? We have an IP that has been discovered to be a major DDOS attack BOT coordination point but it's not listed in PAN's threat vault and is not bein

...

panorama commit shows 0% but commit is on the device already

I have a really funny issue here.
I have panorama for managing all my firewalls, spread across the world.
I did a change for our London firewalls and hit "push and commit" on panorama.
The queue shows 0% progress, I waited half an hour, restarted pan

...

Interface down due to internet down

Hi,

my PA220 interfaces were down due to internet connection is down. As the internet connection was up, the interfaces also showing UP. Why is this happening. is there any settings for this to check.

PCNSE certification, how to get an online training fully covering all the possible questions

Am confused by the amount of training available online. basically i want to get pcnse certification as fast as possible. how to do?

Resolved! why custom url category action should be none as best practice

i read that for best practice if we make custom url category its action should be none for security reasons

need to understand why?

Resolved! HA4 firewalls

Hi,

is there any reference which firewalls do have the HA4 option?

Can´t find any information about.

Thanks in advance!

Resolved! B2B VPN IKEv2 Fail with Amazon Private Cloud Peer

Setting up a VPN with a vendor. It came up the first time and test data was passed. It was a couple of weeks after testing before the tunnel would actually be used. When that time came we could not get the tunnel up. IKEv2 fails. I know nothing chang

...

Scheduled Log Export -user keeps defaulting to admin

OS - 11.1.2-h3

Setting up the scheduled log export for traffic via scp - initial connection test OK. So I know ports are open etc...

We enter the username of the user for the SCP server that is going to be used and the password. As soon as you cl

...

Eve-NG Palo Alto VM ARP Issue

Does anybody encounter arp problems in eve-ng on palo firewall with pan-os 11 version ? As an example, i have a small topology like clientA->routerA-> firewall<-routerB<-clientB , when i try to ping from clientA to clientB, clientA send ARP Request

...