General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! QoS Configuration Subnet /32

I have followed below link to configure a QoS setting for testing purpose.

Configure QoS (paloaltonetworks.com)

I have specify only 1 ip 192.168.1.x /32 in QoS profile and also tried to specify in the interface clear text traffic.

In the result t

...

With PanOs and DUO (As 2FA), Entering on Windows Globalprotect ask to duo indefinitely.

Hello Everybody,

We have recently upgraded our Firewalls to PanOs 10.2.2. We have DUO as a second factor authentication.

The config we have is with "Always On" , from the upgrade, When a Computer starts, the user enter the credentials, and then

...

Resolved! Upload and Download QoS

May I ask how to configure upload and download QoS?

I have tested whether I perform upload or download, the QoS always hit LAN->WAN policy. The result is different from what this article said.

https://live.paloaltonetworks.com/t5/general-topics/qos-b

...

Resolved! HELP - my Website is being blocked by GlobalProtect

We have produced a new website for a customer https://vertexgis.uk/ , but their key target audiences in the UK all use GlobalProtect and their website is being blocked as it is seen as a new site although it is now about 3 months old.

Please can an

...

Cisco VPN Behind PA-3220

We have a third-party that borrows our network to establish a VPN tunnel back to their office via a Cisco 881 ISR. We have it on a segregated guest network and it establishes an ike/ipsec tunnel back to their ASA over our internet connection.

Works

...

Someone school me on Syslog and Panorama

I have Panorama managing roughly 10 firewalls. I have logging setup on those FWs to send to Panorama, email and send syslog to a 3rd party host. I struggled immensely trying to get everything configured correctly on PANORAMA and the FWs themselves

...

Not getting proper SMTP traps for power supply removal and insertion

Hi Folks,

We have PA-5260 in HA pair in our environment. Recently we had configured SNMPv2 traps on Palo Alto firewall to forward traps to our SNMP server and configured Log forwarding to forward All system logs as traps to the SNMP server.

Spec

...

Question about CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (Severity: HIGH)

Dear all,

PAN-OS

CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (Severity: HIGH)

https://security.paloaltonetworks.com/CVE-2022-0028

About CVE-2022-0028 on Palo Alto vulnerability. If we have

...

Resolved! The deep packet inspection on SSL Decryption via Publicly signed Certificate

Regarding using a Publicly signed certificate for SSL decryption.

Is the deep packet inspection possible or not?

Is there any impact?

Resolved! SSL Decryption+ALPN not stripped: yandex.com not working

Hi

I have a customer that wrote to me yesterday that if they remove the checkbox for Strip ALPN while having SSL decryption enabled, a few web sites such as yandex.com stop working.

I was able to reproduce this with my PA-3220 and PANOS 9.1 and also o

...

Resolved! Updating the HA configuration in large hops.

Hello community

I am upgrading a PANOS 8.0.7 to version 9.1.14-h1

I would like to know if in the transit versions, you download and install only the base 9.0.0.0 or is recommended to download the base 9.0.0 and install the recommended 9.0.16-h2
fo

...

PAN-DB is not connect to cloud

DB Cloud is not connected as i have 9.0.3h3 version. And this command is also not running. Please suggest

request url-filtering download paloaltonetworks region <region_name>

Command user group name not working

Hi,

We just check that the command: show user group name 'cn=......' has this output:

user group xxxxx does not exist or does not have members. All config is OK.

If we run "show user group list", i can see al the groups, but filtering by one of the

...

Issue with VXLAN traffic passing through the firewall

Hi Team,

We have an SDWAN box placed behind the firewall and the SD_WAN box need to communicate with the controllers which is located on the internet.

The topology is given below:

SD_WAN Box<--->F/W LAN interface<--->F/W ISP interface <--> Internet <

...

Resolved! Sinkhole vs whitelising url

Does the sinkhole take precedence over whitelisting? We whitelisted a url and are sinkholing parked categories. I can request to have the category changed, but was not sure which took precedence.

Discussions