General Topics

Discussions

Sorted by:

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Authorization code

Unable to find the Authorization code

Custom Logs / Path Monitor Alert

Hello!

I may be trying to do something impossible, but it seems like the configuration elements are all there. We have a static default route to our ISP that is set with path monitoring so that we failover to a backup route when the gateway is unr

...

IKE phase- 1 SA is expired every 10 seconds?

Just curious, has anyone every seen IKE phase-1 expiring every 10 seconds, can't seem to figure it out.

Thanks

Palo Alto Networks System Engineer PSE - SASE Associate exam

Could anyone kindly guide me through the process of registering for the Palo Alto Networks System Engineer PSE - SASE Associate exam via Pearson Vue? Your assistance would be greatly appreciated.

building a lab with PA-440 or VMs

Hello everyone,

I have some knowledge about PaloAlto NGFW but now I intend to focus and get some certifications. For that I bought a PA-440 which runs 11.2.5 and I intend to buy a second one which doesn't have an active license and running 10.2.3-h

...

No internet after changing ISP

PA-440, OS 10.1.14, Standalone

We just changed the ISP, the static IP in interface (WAN), updated the Virtual Router as well, NAT, PBF, Security Policy was checked, IKE Gateway.

But we couldn't browse the internet. The firewall management GUI is also

...

Error 1006

Hi everyone!

I got error 1006. I really need help.

Thank you!

Resolved! Transferring assets from one CSP Tenant account to another

We have previously purchased and licensed a VM series firewall using our parent company tenant (Company A) and email. However, when comes to license renewal, we have purchased it under our child company (Company B).

We would like to transfer the as

...

Configure SAML for GloblaProtect and use groups to filter

Hi,

I would like to configure SAML for my GP authentication and I would also like to be able to assign IPs by user groups and configure rules for these remote users by user groups.

Does anyone know if this is possible? how can match users received

...

Resolved! how to whitelist Akamai downloads ?

How do yuo configure a correct FW rule to only allow downloads for a specific user from a specific URL, but the content is hosted on akamai networks ?

I configred a FW rule with the URL of the server as FQDN in the destination field and allowed downl

...

Resolved! Proper "outside" interface configuration

Hello all!

I'm facing an issue which brings me to ask what the proper configuration should be for an outside interface.

Given the attached diagram and captures, do I have the correct outside interface (vlan.100) configuration?

diagram

Outbound t

...

ACME and SSL decryption

So i recently got wind of this:

https://www.thesslstore.com/blog/47-day-ssl-certificate-validity-by-2029/

acme.sh and/or certbot takes care of the servers, but won't this break existing SSL decryption rules?

Any strategies/workarounds for this? t

...

Insufficient Data

I am running into an issue where an internal application is not being identified and on the logs appear as "insufficient data". What can I do to on the firewall to allow the application to be identified?

Resolved! Clarification on http2 traffic and decryption

Hi all,

I was hoping to get some clarification on http2 and firewall interaction. I understand that generally http2 works without issue as long as it's being decrypted. I also understand disabling inspection/decryption (Strip TLS ALPN) on http2 tra

...

Resolved! Best method to block Instant Messaging

Working for a State Government agency, we are required to keep a record of any official electronic communication. Using public Instant Messaging services creates a problem for us in that we don't have a mechanism for keeping copies of any transactio

...