General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

HA2 down

Colleagues, greetings. I got HA pair, a\p. The model of the devices are 3220. Both working on 9.1.0 PAN-OS versions without any problems. BUT! When I want to upgrade them, for example to 10.0.0, I face problems with HA2 links (HA2 and HA2 backup) being down. The scenario is when I upgrade my passive node, so my active(suspend) is 9.1.1 and my pa...

Resolved! IPv6 Tunnel Endpoint (Tunnelbroker.com)

HiI'm trying to "play around" with ipv6. As my ISP doesn't offer IPv6 to my connection I want to use tunnelbroker.com to setup a ipv6 (6 in 4) Tunnel.I've read that this feature has been dropped since 4.1, is this correct? If so, ayn other chance to get this running?I get a /64 and a /48 from tunnel broker so I thought I use my fritz.box (www.av...

Unable to Connect IPSec VPN Tunnel

Need assistance to connect a VPN IPSec Tunnel between PA and Cisco 4300 Series. Everything seems to be configured on both sides, but when I check logs on the PA-CLI, it shows this log: IPsec-SA request for 150.220.213.178 queued since no phase1 found2022-11-17 10:49:19.353 -0600 [PNTF]: { 1: }: ====> PHASE-1 NEGOTIATION STARTED AS INITIATOR...

Google-base

application: google-base is blocked.. how do I correct on my firewall

Resolved! Last Version Supported by PA-850

Hi Team, Please help me with the last version supported by PA-850 model. Your response is highly appreciated. I dont see the details in the below link. Hardware End-of-Life-Dates - Palo Alto Networks Regards, Sanjay S

Resolved! mgmtsrvr zombie process

Dear Team, I'm using 9.1.12-h3 PAN-OS. When entering the 'show system resources' command, one zombie process is identified as below. In detail, it is confirmed that the 'mgmtsrvr' process is in a zombie state. I would like to know what caused the process to be judged as a zombie. I am aware of 'PAN-175211' fixed in version 9.1.13. When ...

Resolved! Release date of PA-3060

Hello all,Does anyone know the release date of PA-3060?I have searched, but I could not find any resources about it.Thanks,

Resolved! Can I deny/block a mac address

Hello, I have a PA-440 firewall that has a rogue router that keeps popping up in the DHCP monitor. I was wanting to know if there is a way to block the mac address of this rogue device as it keeps causing issues. Joe

Policy Optimizer Panorama in Management Mode

Can Policy Optmizer be used in Panorama running PanOS 9.0 or 9.1 in Management only mode for firewalls running PanOS8.1 ? I could not find information on how the Policy Optimizer works under the hood. Does it look at the actual traffic logs or do the firewall create statistics, which are sent to Panorama?

What is PA doing? Why is it now so difficult to open a case

This is absolutely ridiculous. Since when does it such a hassle to open a simple case? Do I need to get rid of my PA devices and move to a different platform?

Find Blocked URLs when Geo Blocking

Hi Everyone, We've implemented geo blocking as a way to help secure our environment in PAN-OS 10.1, with an exception/allow rule for a specific group of URLs. We sometimes run into a case where portions of a web site display fine, but other portions do not display at all. Currently, we sift through our browser development tools (by pressing ...

unable to change device name in assets

Just registered a new pa 220. unfortunatly the wrong device name was entered. Going back it doesn't seem to let me change it. THe form opens up, i make my change and hit submit. nothing happens TIAJohn

What is Application Web-Browser in the traffic filter? Does the URL web-browsing application show in the URL filter?

When I look in the URL filter, I see myself going to a webpage with the URL. Than I copy the IP of the URL and look in the traffic log. I see the that myself and one other person has accessed that IP. However the URL Filter only shows that I have went to that URL. The only difference I can see is the Application type on the traffic filt...

Deleting Cortex XDR app...

Hi, I still have an old Cortex XDR app on my MacBook from an old employer that I'm not able to contact. When I try to delete it, I get a dialogue box that says I can't move it to the trash because it's still open. Can anyone help with how I might be able to delete it? Thank you...

Meaning of packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall

Hi All, Our Data Plane is going high. While checking we could see that the packet descriptor (on-chip) average and the packet buffer average had gone. I just want to know what does packet buffer, packet descriptor and packet descriptor (on-chip) on PA Firewall means. Thanks in advance

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

HA2 down

Resolved! IPv6 Tunnel Endpoint (Tunnelbroker.com)

Unable to Connect IPSec VPN Tunnel

Google-base