If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users.
In the past six
...
Hello,
If I have a policy for example that allows application "web-browsing" and service is "port 500" - does that mean that the rule will allow if the application is either "web browsing" OR "service 500" or the rule will be allowed if the applicatio
...
Hello all,
currently we use a Panorama VM running PanOS 9.0.5 in Legacy mode (did not even know that was possible) to manage a couple of HA pairs of firewalls.
Unfortunately we are unable to edit the resources of that VM in our Hypervisor, likely due
...
Hello,
I would like to know if static route path monitoring can monitoring outside of the interface bound to the static route?
For example, I want to monitor across a VPN tunnel and if the test fails, withdraw the static route so traffic fails over to
...
Is there limitation of the Alternate Username attribute that be used ? Per example, I'm using a extra attribute which is "uid" which is available in Microsoft AD User attribute. From tcpdump trace, I can see that FW ldap request and AD response prop
...
trying to use monitor (query traffic log) by way of drop-down arrow on a dynamic address group, it gives error saying ' doesn't exist or doesn't contain any member'. However, activating the monitor from a policy rule name which uses the dynamic group...
Hey there everyone.
I wanted to let everyone know that the Cyber Elite experts are among our top contributors within LIVECommunity, and our first interview is with @MP18.
Read the blog here:
https://live.paloaltonetworks.com/t5/blogs/get-to-know
...
Hi all,
I'm quite new using Panorama.
I need to create a new network interface on a device managed by Panorama.
I tried to modify the template but when I push it to device I got an error telling that there isn't that interface.
Of course I miss something
...
Hi,
I would like to do url white listing. before i do white listing , i would like to monitor all url of users and office application.
after that i would like to allow specific url only. In paloalto monitoring is only show destination ip address and ne
...
I've been testing the logging of change events to a syslog server from Panorama. Syslog events indicate a change made by a person and the general section of the change without giving any specific details of what was changed. Looking in Panorama in
...
When upgrading from VM100 to VM300, is there an upgrade SKU with discounted price or use the SKU# "PAN-VM-300-PERPBND2" with regular price?
Thanks,
Michael
Hello guys and Happy New Year!!
First time when I use an palo alto device. So I configure this device PA-220, and I put it on my network.Everything works great but I have some problems; For example now all my MFP devices wont scan to email anymore. I
...
We've closed an office and took the two PA-500s off the network, and are now attempting to remove them from Panorama (following this procedure: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cmd6CAC ). Everything is good up
...
Hi,
I will be upgrading my 3050 firewall (managed by panorama) to a 3250 soon and am curious if there are any best practices guides out there moving from a 3050 to a 3250?
Thanks!
i'm have issues with IPSEC Tunnel which is configured by another engineer. currently facing issues with Tunnel connectivity and i need to cross verify the parameters. So can someone guide how to heck pre shared key in plain text format
@IPSec IPSec S
...
Hi there,
we're shipping our logs to a centralized syslog instance. That works great for all types of logs from the PA with the exceptions of the CONFIG logs.
The CONFIG logs are submitted at all, with the problem that the interesting parts "before-ch
...
on:
PAN-PA-5220 Purchase
on:
sdwan interface down - recently upgraded to 10.1.6
on:
Session end reason=resources-unavailable, version 8.1.15.h3
on:
Admin credentials were not changing
on:
URL Filtering Wildard - ? in URL
