General Topics

Site to site vpn issue

Dear Team,

I have one site 2 site VPN tunnel b/w Paloalto and cisco. some time i can see the tunnel is going automatic down and after some time it will come automatically. 

I have checked ikemgr and system logs but i am not able to find exact issue why

I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to VPN

I would like to know whether Palo Alto support crowd strike antivirus endpoint monitoring ( Antivirus update check ) before connecting any user to VPN network or not.

If yes, Please let me know document for deployment steps.

IPSEC tunnel Intermittent disconnect between onprime PA-5250 and and VM PA hosted on Azure.

Hello all,

Need help.

We're experiencing unsual IPsec tunnel disconnect between our main firewall PA-5250 and VM series hosted on Azure. 

PA-5250 - Version 8.01 - Static GW IP address 2.2.2.2

VM series VM:-  10.0.7 - Azure01 - GW IP is dymanic represent

on hold 3 1/2 hours ...is Palo closed today? This is unacceptable....we pay BIG $$$ for premium support

on hold 3 1/2 hours ...is Palo closed today? This is unacceptable....we pay BIG $$$ for premium support

Use case for "Custom Include/Exclude Network Sequence" in User-ID

Having dealt with it recently, I can't really understand the reason why the "Custom Include/Exclude Network Sequence" section on User-ID integrated agent configuration exists, instead of more common "Move up" / "Move down" buttons.

As far I have unde

Find object tag in Rules?

I am trying to get rid of FQDN objects that no longer resolve (1000's BTW). Problem is that you can't delete an object if it is in a rule or address group. I can tag all the objects via command line which is great, but how can I see all the rules whe

Setting Up PA220 for Home

Hi,

I'm trying to get my PA220 up for my home use.

Right now it's plugged into a router, and I am plugging a laptop into the second ethernet port.

I went through instructions here:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0

Error querying OCSP responder

We have an issue with the R3 root certificate caused by the OCSP Certificate Revocation Checking within our decryption profile. We're seeing all sites using this certificate being blocked due to unknown issuer. When we run the "debug sslmgr view ocsp

are you permitted to remove all local admin accounts pan-OS 9.1 or higher?

hello all,

I'm a PA noob who has recently just transitioned to a team that has a pretty heavy backlog. sorting through it, I see another team has requested that we remove local admin accounts from our firewalls. to my knowledge, the only local account

Website access issue

Hey team,

The site is showing in cryptocurrency and getting blocked (https://www.tradingview.com/).

As the checked site is showing under 3 categories and we do not want to allow cryptocurrency.

As a workaround, we added the site into the custom categor