General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Accidentally Deactivate License

Hello we have PAN that license uploaded manually before, because a network issue that we cant get the dynamic update/retrive the license.

we think that the license problem, so we want to remove the license and then add again to the firewall. but we ch

...

Email Scheduler Not Working (Urgent Action Required)

Hi Team,

We've configured to schedule reports for email delivery on daily basis, It was working fine without any issues but last week we had restarted the Palo Alto firewall, Since from that day we're not getting custom report email.

When we check "s

...

Site to Site VPN failing when IKEv2 and different PANOS

Hello,

I’ve recently ran into an issue where I’m using IKEv2 preferred and the two firewalls are using different versions of PAN-OS. It will fail with “invalid sig.”. If both firewalls are the same PAN-OS version (this has been happening on 9.1.11-9

...

Session behavior when resource limit is reached.

Hi,

I have been checking my PA-2050 with PAN 4.0.3 and I realised about new command in sesion configuration. The exact command is:

set deviceconfig setting session resource-limit-behavior with the options bypass and drop. Default option is drop.

I had

...

Resolved! Passive device aggregate interface down

I have the firewall 3220 model in the 9.1.11 version in HA mode.

I can see all the aggregate interface in passive firewall is showing down. i want to know is this expected behaviour or not because I checked the below KB for some mode it is expected be

...

Increase CPU on VM-series

Hello

As PAN-OS CLI is locked, I don't have the ability to run a script and increase the CPU of my VM-series instances in Azure VMS.

I'd like to test and demonstrate the scaling (IN/OUT) feature regarding CPU level (high/low).

Did someone knows a way/s

...

Resolved! Full cone/Port Restricted/Restricted NAT

Hi all,

I need to make work a voip server behind my pa-3020. The server is using stun protocol and requires that nat is not symmetric.

I've tested a public stun server (for example stun.telbo.com on port 3478) using pystun3 (a python tool to retrieve

...

can't access to menu palo alto "error: file '/boot/' not found"

Hello,

After a factory reset of the Palo Alto PA-3220 (Firmware 10.1.1), then a reboot, I cannot access any of the PANOS partitions (maint-sysroot0, maint-sysroot1, etc.).

And this message appears when I select one of the partitions in the menu (grub):

...

Resolved! Dropbox uploaded files not determined correctly

Hello, after implementing SSL decryption we're trying to improve visibility and noticed that files to dropbox web aren't shown correctly

When downloading from the dropbox website, the file names are correctly shown, but when uploading the files are r

...

Query about EDL in an VSYS environment

Hi Folks,

We had 5 vsys active on the firewall. We had configured separate EDL for each vsys. My query is when we check the EDL Maximum capacity on the firewall will it show the Total EDL capacity utilized for 5 vsys capacity utilized by each vsys

...

Resolved! IpSec Tunnel Phase2 Red But Ike Side Green

Hi,

I have several TpLink Archer Mr400 4G Router. I setup Ipsec VPN tunnel between PA-220 and them many times. But new one is not success at Phase2.

Phase1 IKE is green so devices communicate. But Phase2 Tunnel Info is red and i can't see any tunnel

...

The PA-3020 in the HA pair cannot automatically run dynamic updates.

Hi All,
I have two PA-3020 that are HA setup, version 9.1.9.
Since the beginning of March, I have found that dynamic updates often fail. Strictly speaking, downloading images is normal. However, one firewall updates normally and the other fails to upd

...