General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

URL Filtering override tab after upgrade.

I am planning to upgrade firewall cluster from 8.1.18->9.0.14->9.1.11.

9.0.x says override tab is removed.

Is it the case with 9.1.x as well?

I have lot of domains in override.

Resolved! Alert configuration via email

how to configure email alert without email gateway

Slowness when filtering at destination in a rule by address-group

Hi,

We are having slowness in a traffic when the destination in the security rule is a address-group. If we configure "any" in destination the session are fast. The traffic is 443 (web-browsing).

How PA can cause slowness in https if the destination

...

Resolved! Shared Security Policy Rules

When you have multiple device groups, are you able to create shared security policies? When I try to select shared and create a security policy rule, the zones are blank.

Only workaround I can seem to find is create a security policy in one device g

...

PBF policy match works in CLI but hangs in the GUI

Hi,

Came across an issue where a PBF policy match works in the CLI, but not in the GUI. When you run the test in the GUI it just hangs. The PBF rule is working as expected in production, its just the test in the GUI that seems to fail. Anyone come ac

...

Resolved! Global Protect not working with RADIUS NPS and LDAP on the same server.

Hello everyone,

We have a Firewall configured for Authentication for LDAP and RADIUS NPS.

Both works fine when I force the authentication profile using CLI:

test authentication authentication-profile LDAP username user password

test authentication auth

...

Resolved! User-ID Agent

What is the User-ID Agent version recommended?

Globalprotect Smart Card configuration

So my company is working to setup a new PKI infrastructure with smart card logins for the users. I have looked at all the 2FA and associated articles about setting up the VPN but it leaves a lot to the imagination. I followed the steps creating the c

...

Resolved! Ping an IPv6 Link local address

Hi,

Is it possible to ping a IPv6 link local address from a Palo Alto firewall? If so, what is the syntax on the firewall CLI?

I know other platforms allow you to define an outgoing interface when pinging a link local address, but this doesn't look t

...

Resolved! Convert a physical interface to an aggregate or add a new aggregate and move associated objects.

I have two PA3050s Active/Active, where I already have E1/12 configured as type Layer 3, no sub interfaces. Is it as simple as doing the LACP configurations on the upstream switches and then converting physical interface E1/12 type to Aggregate, then

...

Can the peer identification be a local ip while the ipsec tunnel is between 2 public IPs?

Hi,

In this tunnel with a FortiGate, I see the FGT sends its peer id as a local IP and not as the IP which takes part in the tunnel ..

So I just modified the peer identification for the local PA to match the FGT private IP peer IP and the tunnel has

...

Old rules can’t edit or can’t create after rules those implemented before create my user account

I’m facing issue to edit or delete in old rules before create my user account in Palo Alto firewall when I login individually but I can do edit and delete old rules from panorama.

what will be the issue and those firewall not connected with panorama

...

Migrating from PA 500 to PA 820

Hi team

Can we directly take backup of PA 500 running PA OS 8.1 to PA 820 running PAN OS 9.0.

Thanks in advance.

Captive portal palo alto issued with chrome

Hi all

I use captive portal on palo alto just zone Lan to internet and found issued about chrome

My client have window 7,8 and palo version 8.1

Test on firefox need open firefox and click to option for login to internet

But on chorme not option for click

...

Migration FROM PA-850 to PA-3220

Dear:

Good afternoon, what is the best migration option from a Palo Alto PA-850 to a PA-3220.

Thinking for example to be able to keep the self-signed certificates in the PA-850, used for Global Protect.

Based on your expertix and experience, what is t

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource