General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! System logs stalling same time every day

On our PA3050 the system logs stall each day at 04:01 and then starts again at 20:00

I have verified this happens in both GUI and CLI

No scheduled jobs correlate with the timing of the logs stopping then starting

I have checked show system logdb-quota a

...

The source port was natted to multiple source ports while the packets leaving the FW

Hello everyone

The NAT type we are using is "Dynamic IP and Port", the Palo Alto Networks firewall translates the source IP address or range to a single IP address.

for this conversion, when the packets arriving the FW, we can see the source port is

...

log forwarding to CDL is generating high traffic volume

Dear community!

We are sending logs to cortex data lake and we noticed high traffic volume for the sessions concerning log forwarding, with peaks up to 200GB of data sent.

Do you know if this volume of traffic can be normal?

Also, is there any docume

...

VPN Site-to-Site FQDN peer ( Dyndns )

Good afternoon, I am trying to set up a site to Site VPN using as PEER FQDN myvpnsite2.dynalias.net ( DynDNS ).

Should I also use the Local and Peer identification parameters and settings or it is not necessary?

A

...

SIP Traffic - End Reason Resources Unavailable

We seem to have a lot of SIP traffic that is reporting a Session End Reason of "resources-unavailable". This traffic is hitting rules that don't even match. Please refer to attached screen capture. What could be the reason?

Thanks for your assistan

...

VPN Site-to-Site and Global Protect - DynDNS IP WAN DHCP

Hello, good afternoon everyone, I hope you are very well.

I have a couple of questions, I hope you can clarify and help me.

1.- Is it feasible to create a Site-to-Site tunnel between two sites with DYNAMIC IP ? Example using DYNDNS, in both sites, is

...

Resolved! Error: Failed to get policy objects: NO_MATCHES(Module: useridd)

Hi all,

Just another day with PA3050s and came accross an odd error when trying to commit my changes as usual.

I tried to resolve it doing > debug software restart process management-server but it did not help.

I am scratching my head to understand wh

...

Resolved! MGMT interface ip address

Hello,

is that possible to use for the MGMT interface IP address from a VLAN that configured in one of the data plane interfaces?

For example:

Eth1/1.100: IP 192.168.1.1/24

Mgmt interface IP: 192.168.1.254/24

DG: 192.168.1.1

Thanks,

DynDNS Certificate

Good afternoon, I am trying to configure DynDNS on the Palo Alto machine.

In the steps it talks about using a certification profile, and in the Palo Alto instructions, it talks about importing the SSL certificate from the DDNS provider. My question is

...

Redundancy VPN between two sites with two ISP

HELLO ALL

We have two PA devices.(850 and 500).They are located in different sites.Both firewalls have two connections to Internet via 2 different ISPs

We want to make Site to Site VPN between these sites.But make it redundant.Two VPN connections betwe

...

Instagram allowed in the security policy, but the pictures are not displayed correctly on the website

Dear Palo Alto Community Members,

I'm tiring to set up a security policy based on app-ID allowing Instagram but blocking Facebook.

Unfortunately, I can't get it to work, and I'm not sure what I might be missing here.

The security policy allows all the

...

Resolved! Auto Logged out of firewall

Hi,

I am automatically logged out of firewall but when I try to login again getting the error attached below,

Any Idea about this? how to resolve this?

Re:Software License

Hi,

Can anyone enlighten me what is the use of the Software license in Palo Alto NGFW and what will be the impact on the firewall, If that license expires.

Resolved! DNS license expired.

Hi

I have PA820 with image 10.0.

Will I still able use URL feature after DNS license expried?

Is true that once the license expired the PA820 next generation no longer function and it looks like it only work as standard firewall?

Thanks

how to adjust interface metric in ospf to define desired route ?

I have to two virtual routers

VR_1 - e1/1 - is connected to wan 1, e1/3 - is connected to internal network, e1/4 is connected to a switch so, VR_1 has e1/1,1/3,1/4 and I want the primary ospf route to be from e1/4. what changes should I make to do s

...