General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! SCCM app deploy issue

I am working on testing improvements to our rule sets by breaking the rules into app groups as opposed to just allow all.

Pretty much everything is working fine except for OSD deployment via SCCM. In particular the O365 click to run installer. The dep

...

Palo Alto and CIsco Jabber isssues with Global Protect

Hi,

We are having issues with cisco jabber using Global Protect.Clients reported that the jabber status (online/offline) is wrong so they have issue calling. The rule VPN-SSL zone to inside is any/any, so no restriction. Looking in pcap we can not se

...

Cortex detect OInstall.exe

How to remove OInstall.exe from clients pc that Cortex XDR detected and block this process.

Some users do not appear in the url filtering monitor logs.

Hello community

I have a PA-220 firewall with version 8.1.16, the error that is occurring is as follows I have several users in a policy which has url filtering, some users are not shown in the logs of url filtering.

When I filter users that are in t

...

IPSec Crypto / browsing issue?

Hi All,

I working on some firewalls and saw the GlobalProtect IPSec crypto profile but was using aes-128-cbc, I decided to change it to use aes-128-gcm, to take advantages of gcm benefits.

Since that change, I have a user who is experiencing issues.

...

Digital Events are Coming to LIVEcommunity!

Hi everyone,

Yesterday we announced the launch of digital events on LIVEcommunity and introduced our first Ask Me Anything (AMA) event — a Q&A session focused on a specific topic where you can connect with experts!

The first AMA event is taking

...

Slowness in panaroma GUI web access

I have pan M-200 with 10.0.4 version.I am getting slow access through chrome as well ss firefox.

How can i resolve this issue.

User-id Credential Check TEST?

I have everything configured following the documents I found online. I see from the user-id logs the BF is being exchanged with the FW. My users login using pre-win2000 id's. (LNameFI) Verified by monitoring the id's and IP's in User-id app. So n

...

Corporate Credential Submissions

Hi All,

I have a question about Corporate Credential Submissions functionality, specifically when using Domain Credential Filter.

To confirm, does this method use the full AD UPN and password to match?

E.g - Let's say my logon name is 'josh.test' and

...

Resolved! Globalprotect: Externel On Demand logon with RADIUS, internal SSO

Hi Community,

my customer wants to use Globalprotect for on demand login with a MFA radius server.

Everything fine - configured is and it works.

Now, we want to use Globalprotect as an internal UserID source.

So every GP-Client needs to do Userlogon SS

...

GP 5.2.5 PANGPS crash when waking from ModernStandby

We have been seeing this over the last few weeks. Here is the sequence of events when the crash takes place.

(EDIT) Crash occurred at 13:01:24 , which is after this line:

(P6096-T15724)Info ( 374): 03/29/21 13:01:23:463 tunnel to 63.240.97.1 connect

...

Resolved! Random Private MAC address

I use DHCP reservations to ensure the devices on my network get the same IP address every time. I have security and routing policies that depend on known IP addresses. Recently Apple, I’m sure other will follow, enabled a feature that by default that

...

Resolved! GlobalProtect: always-on pre-logon external and not logon internal is not working

I am trying to setup GP as always-on (pre-logon) when the user is external and not connect while internal. My understanding was that the internal host detection setting was suppose to let the client know that it was internal and not try to connect to

...

Resolved! GlobalProtect slowness

Is anyone that is using GlobalProtect seeing significant performance issues? We are running PAN OS 5.0.10 and GP 1.2.8. We are also doing full tunnel. When I do a speed test from home without GP enabled I get 20 Mbps down and 5 Mbps up. With GP e

...

Minemeld support on either Ubuntu 18.04 or 20.04?

Does anyone know when Minemeld may be able to run on either Ubuntu 18.04 or 20.04? It installs fine on 16.04, but with support for Ubuntu 16.04 ending on April 30, 2021, I would like to install it on one of the later releases will will at least ha

...

Discussions