General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

wesense to palo alto 3020 migration for URL filtering

Hi Team, What is process to migrate websense URL filtering policy in Palo alto 3020 model firewall ? Can we upload policy with any tools or Can upload CSV or any other format policy file if I will download from web sense firewall ? Please suggest. ThanksDarshan Desai

Clobal Protect VPN auto connect

Hi guys, I don't know exactly I must here posted my case or in some other location but sorry in advance. .. My question is follow:I'm use GP client on Windows environment and I would like to find solution for "auto connect or auto logon" in GP client. How I can do this? Thank you in advance.

Resolved! connect-server-monitor-failure

Hello, We have been experiencing User-ID server monitor connection timeouts to one of our Windows 2008 R2 Domain controllers. The VM domain controller seems fine with all other services (Non Palo). User-ID Agent 8.0.507 installed on the domain controller. Receive roughly 20 alert emails at all times of the day, there is no pattern in frequency. ...

Resolved! East to West traffic internally monitoring Bandwidth

I am using PA 3020 firewall and will need to monitor traffic east to west and configured internally. Any one will provide me process how to configured that will be great help.

Lots of Discards after upgrading to 9.1.14

Dear all !! Facing a big issue after upgraded to 9.1.14. Lots of Discards in legitimate traffic show session id 6088287Session 6088287c2s flow:source: 172.27.107.40 [Aulas_Int]dst: 138.68.127.222proto: 6sport: 59736 dport: 443state: DISCARD type: FLOWsrc user: unknowndst user: unknownoffload: Yes s2c flow:source: 138.68.127.222 [vCMP_AULAS]dst: ...

Happening tomorrow! Register for ZTNA 2.0: The Next Era of Secure Access Event

Join us for the unveiling of ZTNA 2.0 with Palo Alto Networks Prisma Access, the next era of secure access! Learn directly from industry experts as they share evolving market challenges, strategic best practices and the latest innovations from Prisma Access. You also don’t want to miss our new security capabilities in action. More details and ...

LDAP configuration - Error: ldap has unexpected text

Dear all, After ldap configuration (ldap server and authentication profile) on my PA-5250 we can't commit changes because we have the following error: shared -> server-profile -> ldap has unexpected text. shared -> server-profile -> ldap is invalid Do you have any idea what can be the issue? Also when I try to delete the ldap ...

Resolved! Sinkhole Exclusion

This host is flagged as suspicious domain and getting resolved to sinkhole.paloaltonetworks.com. This is a legit host name using for Microsoft certificates. Looking for a way to restore correct resolution. C:\>nslookup cdp1.public-trust.comName: sinkhole.paloaltonetworks.comAddress: 72.5.65.111Aliases: cdp1.public-trust.comThanks

Resolved! Command related inquiries(debug device-server dump pan-url-db statistics)

Dear Team, I would like to know what the output value of the command "debug device-server dump pan-url-db statistics" means. I checked the output as below when executing the command in my LAB.If there is any link or explanation that I can refer to in relation to the above command, please advise me. Thanks in advance,Kyungjun,

Resolved! Requesting info for PCCET exam please

Hello all I hope all of you are ok.Please can someone tell me how can I book my PCCET exam, I have done the training (PCCET) on BEACON portal, and I would like to know where and how I may book the exam- I will be so grateful for the help Ps: I am new in the cybersecurity field, and I am starting to learn about this wonderful world. any book sugg...

Resolved! IOT SNMP Queries using Xsoar and L3

I see that snmp queries can be used to discover devices for IOT using xsoar engines. I also see that it uses cdp lldp and gathers arp and mac data.https://docs.paloaltonetworks.com/iot/iot-security-integration/network-management/integrate-iot-security-with-network-switches-for-snmp-discoverySpecifically in the documentation:The XSOAR engine als...

Resolved! Log Forwarding

I have setup Syslog forwarding from multiple firewalls to a log collector, but I cannot see any Syslog traffic in the logs. Does this traffic get logged by the firewall/Panorama, or is it allowed through without needing a firewall policy?

Panorama OS compatibility

Hi Team, I am planning to upgrade Panorama software version from 9.1.13 to 10.1.*. But the i am confused whether the Panorama with OS 10.1.* can manage PA3020 running on PAN OS 9.1.* and PA450 running on PAN OS 10.1. *?

High loads by scanner

Good afternoon. At 11:57:26 (9:57:26 GMT), there was a log entry which said this company was scanning our VPS. This made it unresponsive with extremely high load for us until I had restarted the HTTPD service. The traffic was also coming from a lot of different IP addresses all by Microsoft. Is this normal? Log entry:198.235.24.150 - - [14/Jun/2...

Resolved! MFA on the Palo Support Portal?

I saw the announcement that they were going to start requiring MFA for logging in on the Palo Alto websites and it mentions a code via email, however, I was already set up to use an authenticator app for this. When I went to log in today, it seems to be ignoring my account settings and doing the email code every time. I tried switching to the ...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

wesense to palo alto 3020 migration for URL filtering