General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Pan Commit Changes By User

An intriguing feature of PAN OS 8.0.9 is the ability to commit your own changes as opposed to all candidate config. This would be great because it's often that two or more engineers will have changes that overlap pending the approval chain. But if I click on Commit Changes Made By (my user ID) - and then try to Preview Changes, I get an error li...

Resolved! GP / PA GUI fault

Hi, I currently have Palo running within a EVENG environment.I have set up Global Protect, the problem seems to be every time I try to log into GP using an AD account. I am automatically logged out of the Palo GUI. Furthermore, the username/password does not even authenticate, even though the un/pw is correct, Has anyone had this problem ? Tha...

Pan-OS 10.0.0 series version WebGui working slow

PA-850 model. From last 2 months its working slow we upgraded it to 10.0.6 version. If any have reason behind this please share.Or any one have details from TAC then please share in comment.Our PA 220 and PA 850 model we upgraded with 10.0.6 version and facing slowness issue WebGui page of any tab we click it take time to open. If we click on an...

URL Category of Security Policy with destination "Any"

Dear All, I created a security policy as below. However, I find all traffic will go through this policy. Do you have any idea? Thanks Source: AnyDestination: AnyService: 443, 80 and specific portURL Category: Custom (*.s3.amazonaws.com) Peter

Resolved! Logging service not connected to Cortex Data Lake

Hi All, We cant enable the logging service and not connected to Cortex Data lake. The region field showing empty. Any idea on how to check and troubleshoot? Cortex Data Lake

LDAP authentication for CLI

I got LDAP authentication working so that when logging into the Web GUI the microsoft active directory accounts works with no problems. When a user logs into the CLI and tries using their LDAP account the system log shows invalid username/password. the username syntax is <title>.<firstname>.<lastname>.

Resolved! Does SSL decryption uses software or Hardware

Need to confirm when we enable ssl decryption then it is resource intensive. Does it uses both hardware and software resources?

Resolved! url filtering

Hi i have raised a change request for url recategorization but not yet received update from palo alto. It has been 24hours

PaloAlto support account

Hello,I am trying to create the PaloAlto support account to be able to access the support portal, I provided all required informations however I get error and I should contact support, I tried to call the support using the local number in Germany no one is answering. How I am supposed to get your support ?

PA HA with Topology Design

Hello Community,I have two sites, I did an initial design, and I want to make sure that I won't find any problems in real installation*on site 1 (topology1) We found a problem that the distance between ISP installation and IT room more than 200m So we wanted to use a media converter copper to fiber , Is this correct or could it cause a problem ...

Resolved! SNMP to track NAT/PAT translation usage statistic

Hi, There's public IP configured with NAT port address translation for outbound Internet access. Can we monitor the statistics/utilization of NAT/PAT to prevent port exhaustion, is yes is there a reference guide what's the OID value or which modules / subtree to refer in mibs file, or via API calls? Thank you

Resolved! Commit fails in 10.0.7

Error-Failed to add 'o15.officeredir.microsoft.com/' to external-URL-list" and Commit fails after that in 10.0.7. we got to know that there is bug ID PAN-172580 declared in 10.0.7 and error will be fixed in Target version 10.0.8(ETA by Mid Nov) I tried to find PAN-172580 in 10.0.7 Known issues but not seeing. Can you please look into it

LDAPS Falling back to LDAP

Our firewalls are configured for LDAPS on port 636 to our Windows DC. We have the require SSL/TLS option checked in the LDAP settings window. The useridd log shows: 2022-03-22 14:42:09.136 -0700 connecting to ldap://[dcserver]:636 with StartTLS...2022-03-22 14:42:09.140 -0700 connecting to ldaps://[dcserver]:636 ...2022-03-22 14:42:09.164 -0700 ...

Device Certificate Issue

Hi Team, We are facing an issue with the device certificate. I have generated that OTP in the CSP portal and imported it into the firewall after I am facing the below issue "Failed to fetch device certificate. Failed to send a request to the CSP server. Error: Operation timed out after 60000 milliseconds with 0 bytes received." Attached the scre...

Adding ping/icmp as a service, or configure "Application Default" under service

Simple question: Can a service for icmp/ping be created, or should I just configure "Application Default" under Service? We have ping/icmp defined under Application, but we also have specific services configured also and ping will not work, falls to the clean-up rule. It's my understanding that if you have specific applications configured that o...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!