Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

🚀 Join us at Palo Alto Networks Headquarters for Ignite - November 14, 2024 🚀

Enterprises are embracing AI to revolutionize their operations, but with innovation comes new cybersecurity challenges. That’s why you can’t miss Ignite on Tour!

This event is your gateway to exploring how AI is transforming cyber defenses. Join us

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Active-Passive HA failover and Preempt disabled

I have an active passive pair:

PAN01- Passive , device priority 50, Preempt- disabled

PAN02- Active, device priority 40, Preempt- disabled

Now I wanted to switch the priority i.e. to make PAN01 active and PAN02 passive.

I changed the priority on PAN02

...

Resolved! Dual ISP - Will not activate dual default gateway routes

I just installed a firewall for a customer last night and it absolutely refuses to activate the default route for both ISPs in the virtual router. Only 1 will go active at a time. The intent is to just use route monitoring and use the primary ISP u

...

Why Destination NAT is not working for internal users.

Why Destination NAT is not working for internal users. Why need to create U-Turn NAT if we have existing Destination NAT created and if internal users want to access it.

Identify the user account while using RDP on desktop

Hi,

This is just an query, so that I can understand this topic better. Bear with me, since I am not a network specialist.

Environment

User works remotely on a laptop and uses GlobalProtect VPN client to remote in on a desktop
The desktop is located in th

...

Multiple IKE crypto profiles on individual interfaces for multiple IPSEC tunnels

Hi,

In 2021 we ran into the issue where it seemed between PA-OS 8.1.x and 9.0.x/9.1.x Palo began either via a feature or bug introduced began enforcing the scenario in the subject line and began dropping tunnels after upgrading and causing issues wit

...

Can CFF format remove the double-quote

HI,

As PA document, https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/escape-sequences.html,

To maintain backward compatibility, the Misc field in threat log is always enclosed in

...

Resolved! software update for PA-820 without support contract

hello all,

my organization has a PA-820 at a branch location that's been a little neglected. it doesn't have a support contract and it's currently running panos 9.0. I would like to upgrade this at the very least to 9.1, but I'm having difficulty loca

...

Is it possible to DDoS/DoS a public IP which has only outbound traffic and ipsec tunnel. No DNAT configured and ping disabled.

Resolved! MFG part numbers confusion

Hello all,

Is there an official document from Palo Alto that lists their MFG part #'s?

For example if I'm looking to purchase a 1 year subscription for my 3220 stand alone firewall I need to know the license part # to purchase. The frustrating part is

...

Multiple IPSec tunnels, single external IP

Looking to set up a POC with a PA-820 that has the following

IPSec VPN site-to-site between our local facility and 3 partner networks
Single external IP, 3 tunnels (IKE P2)
NAT to a single host on our local private network

Is this reasonable/possible?

Resolved! Default PANOS for PA series

Hello,

Anyone have the ideas how to check online what is the default PANOS which ship with PA series FW?

I have PA-3220 ordered last Nov and it will arrive soon.

Many thanks,

details logs traffic report generating issue

I'm trying to fetch report custom for traffic details log ,but it not generating .summary logs report for traffic is generating. pan os version 9.0.9-h1 .PA-3250 model.

Failed exporting config bundle via ssh

Failed exporting config bundle via ssh to servername.com /tmp/pan/pano_name_20220106.tgz: No such file or directory..Killed by signal 1..'

It was working, but suddenly has stopped. "Test SCP server connection" works and drops the test file in the co

...

Resolved! Installing a new cert

For Global Protect I currently have a server cert on my PAN 3220. When i imported it it had the entire chain - root, intermediate and the server cert. That server cert is now nearing expiration. I gave our cert manager a CSR from the PAN and I now ha

...

PRISMA SD-WAN

Is Palo Alto dropping support for PRISMA SDWAN? A lot of the older but detailed CG branded docs are gone, but there are no new Palo Docs to replace them? I'm interested in implementing the Cloudblades, and all the site links take me in a loop of

...

Discussions