General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! what is the function of autocommit in PAN-OS?

Hello, i want to know function of auto-commit during PAN-OS rebooting. If the auto-commit failed, how does PAN-OS works?

LAN to Portal/Gateway Externo same Firewall

Dear:

Good afternoon, is it possible from my LAN network, to connect via Global Protect, to the external portal/gateway of my Firewall ?

I tried, despite having the permissions at the policy level and it fails to establish a connection.

Is it strictly

...

URL Filtering override tab after upgrade.

I am planning to upgrade firewall cluster from 8.1.18->9.0.14->9.1.11.

9.0.x says override tab is removed.

Is it the case with 9.1.x as well?

I have lot of domains in override.

Resolved! Alert configuration via email

how to configure email alert without email gateway

Slowness when filtering at destination in a rule by address-group

Hi,

We are having slowness in a traffic when the destination in the security rule is a address-group. If we configure "any" in destination the session are fast. The traffic is 443 (web-browsing).

How PA can cause slowness in https if the destination

...

Resolved! Shared Security Policy Rules

When you have multiple device groups, are you able to create shared security policies? When I try to select shared and create a security policy rule, the zones are blank.

Only workaround I can seem to find is create a security policy in one device g

...

PBF policy match works in CLI but hangs in the GUI

Hi,

Came across an issue where a PBF policy match works in the CLI, but not in the GUI. When you run the test in the GUI it just hangs. The PBF rule is working as expected in production, its just the test in the GUI that seems to fail. Anyone come ac

...

Resolved! Global Protect not working with RADIUS NPS and LDAP on the same server.

Hello everyone,

We have a Firewall configured for Authentication for LDAP and RADIUS NPS.

Both works fine when I force the authentication profile using CLI:

test authentication authentication-profile LDAP username user password

test authentication auth

...

Resolved! User-ID Agent

What is the User-ID Agent version recommended?

Globalprotect Smart Card configuration

So my company is working to setup a new PKI infrastructure with smart card logins for the users. I have looked at all the 2FA and associated articles about setting up the VPN but it leaves a lot to the imagination. I followed the steps creating the c

...

Resolved! Ping an IPv6 Link local address

Hi,

Is it possible to ping a IPv6 link local address from a Palo Alto firewall? If so, what is the syntax on the firewall CLI?

I know other platforms allow you to define an outgoing interface when pinging a link local address, but this doesn't look t

...

Resolved! Convert a physical interface to an aggregate or add a new aggregate and move associated objects.

I have two PA3050s Active/Active, where I already have E1/12 configured as type Layer 3, no sub interfaces. Is it as simple as doing the LACP configurations on the upstream switches and then converting physical interface E1/12 type to Aggregate, then

...

Can the peer identification be a local ip while the ipsec tunnel is between 2 public IPs?

Hi,

In this tunnel with a FortiGate, I see the FGT sends its peer id as a local IP and not as the IP which takes part in the tunnel ..

So I just modified the peer identification for the local PA to match the FGT private IP peer IP and the tunnel has

...

Old rules can’t edit or can’t create after rules those implemented before create my user account

I’m facing issue to edit or delete in old rules before create my user account in Palo Alto firewall when I login individually but I can do edit and delete old rules from panorama.

what will be the issue and those firewall not connected with panorama

...

Migrating from PA 500 to PA 820

Hi team

Can we directly take backup of PA 500 running PA OS 8.1 to PA 820 running PAN OS 9.0.

Thanks in advance.

Discussions

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

Discover LIVEcommunity Through Our New Animated Explainer Video!

Resolved! what is the function of autocommit in PAN-OS?

LAN to Portal/Gateway Externo same Firewall