General Topics

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Globalprotect client losing dns intermittently

hello everyone

We have a intermittently issue with GlobalProtect client and the local DNS resolution. We have conigured local dns servers on network services and we have established "Resolve All FQDNs Using DNS Servers Assigned by the Tunnel (Windows

...

Inbound traffic to DMZ issue

We have reports of certain users not being able to access our public website but majority of users are able to. The traffic log shows that the application is incomplete. Packet capture reveals the 3-way handshake does not complete and the session tim

...

Resolved! Can PA firewall work as Explicit proxy

Dear All,

Can Palo Alto firewall works as explicit proxy for internal usets ? Appreciate sharing official article .

VPN IPSec Configuration Disappeared from GUI

An issue where I can’t view any configured IPSec Tunnels in GUI,

From CLI, the IPSec tunnels appear normally.

Tried failover, restarting management service, even rebooting both Palo Alto units, using different browsers, different computers, and export

...

PA-850 Migration to 10Gb SFP+ Interface

Hi, I have a customer who was a PA-850 firewall. There connection to their LAN is currently using a 1Gb Ethernet port (Port 4). They are in the process of upgrading the network backbone to be 10Gb and wanted to change their connection to the Firewall

...

Resolved! Block Windows 7

I am trying to block Windows 7 clients from accessing the internet. I have followed the steps here: https://live.paloaltonetworks.com/t5/Configuration-Articles/Custom-vulnerability-signature-for-identifying-Windows-XP/tac-p/72273#M1496

but I am uncle

...

GlobalProtect and "client sleep mode"

Hello,

as described in the "GlobalProtect 1.1.6: Addressed Issues" (issue point 35361) the unnecessarily reconnection after sleep/hibernate mode should be fixed.

We are using the GlobalProtect Version 1.1.7 . The portal configuration are:"On demand" mo

...

Resolved! Custom App for CRL downloads

Hi,

I am trying to create a custom app that will match CRL downloads, to allow them without any questions ask. Shouldn't be too hard : on a previous web security gateway, I would match a pattern like the following: "http://([^/:])*crl.*\.crl"

When tran

...

Resolved! PAN-OS 9.1.11-h3 upgrade file

Hi support,

May I know the upgrade file for PAN-OS 9.1.11-h3? I could not confirm it.

Below is my environment

PA-5200 platform
VM series
Panorama M images

Thanks !!!

Is there a community edition of PAN OS?

I am looking for a legal copy of PAN-OS OVA is there a way I can download?

Global Protect HIP Check - Defender ATP

Hi, we're implementing Defender ATP as an anti-malware solution.

I would like HIP checks to restrict Global Protect connections from clients without a recent AV scan performed, without Real Time Protection Enabled or with out-of-date virus definition

...

Bypassing "Packets dropped: forwarded to different zone" limitation

Dear community!

I´d like to consult with you for a possible solution for this scenario:

We have 2 internet lines from two interfaces of the PAN firewall connected to two different routers. Each interface is in a different zone.

When incoming and return

...

Resolved! GP VPN agent issue

Hi Team,

We have a setup like GP VPN and cisco duo.

When a user is trying to connect to GP it will send a request to the cisco duo and once the cisco duo will approve the connection, the user will access the GP.

One of our system is not working prope

...

Resolved! How to release a vpn tunnel?

I have alot of tunnels between nodes, and it seem periodically one will hang, almost like a zombie process.

Is there away to break/kill this tunnel down without taking the other tunnels down?

Licenses on Airgapped Panorama

Hi guys,

I was wondering if anyone has any experience using a totally airgapped panorama/firewalls deployment.
At the moment I have a case where none of the devices are allowed any outside connections.

I thought it would be do-able since both software

...

General Topics

Discussions

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free