General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! Logging service not connected to Cortex Data Lake

Hi All, We cant enable the logging service and not connected to Cortex Data lake. The region field showing empty. Any idea on how to check and troubleshoot? Cortex Data Lake

LDAP authentication for CLI

I got LDAP authentication working so that when logging into the Web GUI the microsoft active directory accounts works with no problems. When a user logs into the CLI and tries using their LDAP account the system log shows invalid username/password. the username syntax is <title>.<firstname>.<lastname>.

Resolved! Does SSL decryption uses software or Hardware

Need to confirm when we enable ssl decryption then it is resource intensive. Does it uses both hardware and software resources?

Resolved! url filtering

Hi i have raised a change request for url recategorization but not yet received update from palo alto. It has been 24hours

PaloAlto support account

Hello,I am trying to create the PaloAlto support account to be able to access the support portal, I provided all required informations however I get error and I should contact support, I tried to call the support using the local number in Germany no one is answering. How I am supposed to get your support ?

PA HA with Topology Design

Hello Community,I have two sites, I did an initial design, and I want to make sure that I won't find any problems in real installation*on site 1 (topology1) We found a problem that the distance between ISP installation and IT room more than 200m So we wanted to use a media converter copper to fiber , Is this correct or could it cause a problem ...

Resolved! SNMP to track NAT/PAT translation usage statistic

Hi, There's public IP configured with NAT port address translation for outbound Internet access. Can we monitor the statistics/utilization of NAT/PAT to prevent port exhaustion, is yes is there a reference guide what's the OID value or which modules / subtree to refer in mibs file, or via API calls? Thank you

Resolved! Commit fails in 10.0.7

Error-Failed to add 'o15.officeredir.microsoft.com/' to external-URL-list" and Commit fails after that in 10.0.7. we got to know that there is bug ID PAN-172580 declared in 10.0.7 and error will be fixed in Target version 10.0.8(ETA by Mid Nov) I tried to find PAN-172580 in 10.0.7 Known issues but not seeing. Can you please look into it

LDAPS Falling back to LDAP

Our firewalls are configured for LDAPS on port 636 to our Windows DC. We have the require SSL/TLS option checked in the LDAP settings window. The useridd log shows: 2022-03-22 14:42:09.136 -0700 connecting to ldap://[dcserver]:636 with StartTLS...2022-03-22 14:42:09.140 -0700 connecting to ldaps://[dcserver]:636 ...2022-03-22 14:42:09.164 -0700 ...

Device Certificate Issue

Hi Team, We are facing an issue with the device certificate. I have generated that OTP in the CSP portal and imported it into the firewall after I am facing the below issue "Failed to fetch device certificate. Failed to send a request to the CSP server. Error: Operation timed out after 60000 milliseconds with 0 bytes received." Attached the scre...

Adding ping/icmp as a service, or configure "Application Default" under service

Simple question: Can a service for icmp/ping be created, or should I just configure "Application Default" under Service? We have ping/icmp defined under Application, but we also have specific services configured also and ping will not work, falls to the clean-up rule. It's my understanding that if you have specific applications configured that o...

Resolved! URL Category Any

Is there any body has got URL Category Any?I check the URL List document and there is no Any category.Also, I had find a category called "uncategory".Will Allow/Block List IP addresses will be categoried in "uncategory"?What's the difference between Any, unknown and uncategory?

Resolved! SAML authentication broke after upgrading to pan os 10.1.4-h4

After the upgrade of Pan-OS from 9.1.11 to 10.1.4-h4 last night, our SAML authentication does not work. We have a setup to authenticate the administrators logging into firewall using a SSO SAML profile which redirects to okta and we get authenticated over there.It was working totally fine with the 9.1.11 version but as soon as I upgrade to 10.x ...

MineMeld behind proxy server - Using docker

I am trying to use a proxy for MineMeld Internet connectivity, and I have assigned proxy settings to the container instance. For some reason, it is not working and I probably need to especifically set proxy settings in the MineMeld application, but I am struggling to do it. We are running dockers on SLES. Any idea about how to maki this work? Th...

XFF IPs Not showing in the Traffic logs for HTTPS Traffic

Hi, I am unable to see the XFF IPs for the HTTPS traffic in the traffic logs. We already implemented the Decryption but still we are unable to see in the traffic logs. Any suggestions.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Resolved! Logging service not connected to Cortex Data Lake

LDAP authentication for CLI