General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Renew firewall CA certificate and distribute with GPO

We have created on the firewall a Root CA which also signs the SSL Forward Trust certificate.

The firewall Root CA certificate has been deployed with GPO to all our devices there Trusted Root Certificate Authorities.

The root ca certificate on the fire

...

TAXII feed for SIEM

Hi,

I have tried minemeld with few miners and output to the inbounfeedhc i.e. PAN EBL/DBL. It is worked as expected. I would like to push the data to SIEM so that i can perform log analysis based on the indicators. How can i use taxii? I have confi

...

Resolved! Wetransfer download site we.tl not seen as Wetransfer application

I have created a rule which allow the wetransfer (download and upload) application.

But when a user receive an email to download a file the url is we.tl/random numbers.

When the user clicks it the firewall doesn't see it as the application wetransfer-d

...

Reset Password company account for support palo email not received

i try to reset my company account password but still not received link in my email

Integrate AlientVault feeds into minemeld

I have been trying to add the alienvault otx feeds to minemeld and followed the steps mentioned in:
https://live.paloaltonetworks.com/t5/MineMeld-Discussions/AlienVault-taxii-miner-versus-prebuilt-reputation-data-miner/td-p/157037

However, I get this

...

Resolved! Twistlock Jenkins Plugin

Hello -

I have Jenkins v2.291 installed. I'm trying to find the twistlock-jenkins-plugin. It installed on our old version of Jenkins. Can anyone point to a location I can download it from. From there I'll try manually installing it.

Thanks.

Traffic diversion

Hello

We have a customer who are running some oracle application in cloud . We have built a site to site vpn between our on prem PA 3200 towards the cloud . Traffic is flowing over this tunnel to and fro

Now we have another company called company B

...

SSL Decryption blocking the Google Drive Desktop

Good afternoon,

We recently enabled SSL Decryption on our FW and seem to have broken our Google Drive Desktop. We can access Google Drive via web, but just can't access it via the Google Desktop file stream.

Anyone experiencing this?

Resolved! No valid URL filtering license warnings on firewalls that are not supposed to have the license

I have several firewalls which use URL filtering and are licensed for it, and several that do not. In Panorama, all the firewalls that do not use it constantly have the Warning:

If I click in to the details I see:

. Warning: No valid threat content

...

Resolved! Teams Traffic issue

Hello ,

for one of our customer , they are facing slowness issue with MS teams . they identified issue with the ISP provider link

There is a Single Palo Alto gateway . The external interface is connected to a Switch ( L2) and the switch is further co

...

EDL Lists - Minemeld

I've made our Minemeld server publicly available and have provisioned a number of lists we use plus some that were part of the old PANWDBL server. You're free to use this server but please be aware that I don't provide any guarantees or warranties to

...

Use Cloud Service (like Cloud Front subnets) in security policies

I would like to use, for example, CloudFront subnets (I 've about 50 of them) in Security Policies.

I find this script https://github.com/chrisgoodwins/paloalto_add-addresses.

Is there the way to use a single big static list without use many address

...

PA -220 Slow

Hi experts ,

When I press commit on the Palo alto firewall It takes a long time around 5 or 7 minutes to complete this task,

and Management CPU reached to full as a screenshot. It’s kinda made it really difficult to work on this device now.

devise Mod

...

Resolved! Is it possible to turn off the Globalprotect HIP check report if HIP checks are not used?

Hello to All,

From what I read even if the "Collect HIP Data" is turned off on the Globalprotect portal the HIP "hipreportcheck" message is still send by default every hour from the client workstation to the Globalprotect gateway as a keepalive opt

...

Resolved! AppID and Service use

We have found instances where applications were changed in house to use a different port than the default. So we are in discussion as to what is the best approach to create policy rules.

Below are the two policy rules involving AppID is what we believ

...