General Topics

Error while committing changes

Hi Team, Getting the below error while committing the changes. I read an article where it says it might be due to memory issue so rebooted the device and checked but still the same issue. Could you please suggest as soon as possible. DLP Configuration not found DLP Configuration populate successfully Error: Error preparing global objects failed ...

Resolved! Cannot login to GUI after pa-vm deployment

I deployed a pa-vm image 10.2.1, set the management IP from the CLI. When I try logging in with the GUI, I put in my credentials and then get the following error "Your login session has expired and you have been logged out for security reasons. Please log in again if you wish to continue." I'm able to SSH into the cli. Things I've tried: 1. rebo...

L3Svc process stopping automatically on PA-3020 firewall

Hi Folks, We are facing issue with the captive portal and had seen that the l3svc processor is not running. We had tried to restart the l3svc process and the mgmt plane process but no luck. our firewall was previously running on PAN-OS 9.1.13h3 and we had downgraded to 9.1.10 and checked but no luck. We had rebooted the firewall again also. Chec...

Resolved! Jobs flooding commit queue.

For the last week or so we have been having issues with download jobs pending and failing in our Panorama. The issue is that there are 2500+ jobs pending on our Panorama and this seems to pop-up at any given time. TAC, to this point, has had us restart the management process, suspend that Panorama and fail over to the other... Until this happens...

Increasing log disk size on Panorama VM

I have Panorama 10.1 running as a VM on ESX. System disk is 224gb and log disk 500gb. I have shut down the VM and moved the log disk to a larger store (2000mb). VCentre now shows the disk as 2TB. However when i boot Panorama it still sees /dev/sdb1 as 500gb. What Panorama commands would i have to run to make it see and use the actual capacity?...

best way to add folders to malware whitelist

having read the document "Add a New Malware Security Profile", I am not clear as to best and properly entering a path to a folder properly. this is a paragraph pulled out of the of the webpage. +Add a file or folder.Enter the path and press Enter or click the check mark when done. You can also use a wildcard to match files and folders conta...

GlobalProtect SCEP NDES Dynamic Challenge Failure

Hi, I have been attempting to get GlobalProtect configured with SCEP for many days without success. The issue I am facing occurs when I have the SCEP Challenge set to "Dynamic" under "Certificate Management" (on the firewall), which is what I am wanting. But when using the dynamic challenge, the GP clients fail to retrieve a SCEP certificate. ...

Resolved! Set permanent IPSec VPN tunnel

Hello guys, would you be so kind and help me with any function, which can set VPN tunnel as a permanent one? Because when tunnel is not using, it goes down and then it will not come up without push on our side. So, maybe there is some function / algorithm which will send over the tunnel small amount of data to keep it alive. I was not able to f...

Global protect welcome page appears multiple time in an hour or so

I have listed two issues with the GP 1. Since I upgrade GP client to 6.0.3 welcome page appears multiple times in an hour or so. Please suggest if any solution 2. Also there is no GP client version yet which can fix the "Sophos AV date capture in HIP check from client machine". As per TAC it will be fix in next version 6.0.4.

Can I ask a msg as a public domain email address customer?

Resolved! Possible to have a web page presented for webistes where SSL decryption Doesnt work?

Hi All, We use SSL inspection and sometimes we have to add websites to a custom url category for non inspection so the webpage can become visible. Is there an option to have the user presented with a webpage so IT staff will know that it's ssl inspection that is not allowing the webpage to be viewed? I've looked but couldn't find any. Usually wh...

EDL error web request failed to complete, error:28

Using EDL provided by https://saasedl.paloaltonetworks.com/ but getting error web request failed to complete, error:28Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Resolved! URL Overide SSL Cert

Palo Team, For URL override, do you need to use an SSL Cert signed by an internal CA? Or can I use an SSL from a public authority like Go Daddy? https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRdCAK

Change the SSL/TLS server configuration to only allow strong key exchanges. Key exchanges should provide at least 112 bits of security, which translat

Ho w to disable Weak SSL/TLS Key Exchange on Palo Alto Firewall while connecting with Globa lProtect VPN

Resolved! suspicious user account and file in my system

Is this BOT or not ? # cat /etc/passwd | grep trapsanalyzer1trapsanalyzer1:x:993:990::/home/trapsanalyzer1:/usr/sbin/nologin # chage -l trapsanalyzer1Last password change : Jul 13, 2020Password expires : neverPassword inactive : ne...

Discussions

Error while committing changes

Resolved! Cannot login to GUI after pa-vm deployment