General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Commit Error

While committing the policy we are getting the below error.

Error reading signature DFA data
failed to handle CONFIG_UPDATE_START

Qos profile max bandwidth setting does not match qos interface statistics.

Hello Everyone,

I have a question about qos and wana to confirm.

I creat a qos profile and set maximum bandwidth 0.2 Mbps, after then apply it to network Interface that I want to qos.

However, after finishing submit commit, I click the statistics of

...

certification

Hello Community

my name is Abdullah and i belong a poor family can palo alto team provide a free certification.

Support Portal display name is incorrect

Hi All,

I have a little concern such that in the support portal, when I tried to create a support ticket, my name is shown as the first part of my email. Even I updated the display name section, still it shows as earlier. Is it possible to reoslve th

...

Resolved! Two GP portals with two different certificates

Hi,

Was wondering if any one has run two server certificates for two GP portals having two different URLs? In theory it shouldnt matter, and the server will be presenting whatever portal the user selects. The gateways will be different and will also b

...

Resolved! PANDEVICE and Panorama Plugin for AWS

I am trying to automate the MONITORING-DEFNITIONS in the AWS Plugin in Panorama. Will the PANOS python library allow me to make updated to the PLUGINs via API?

SNI for GlobalProtect

Hi,

is there a way for globalprotect to only listen to a specific URL and forward all other FQDNs?

I already have webservers behind the palo listening to specific SNIs and would like to keep it this way.

OSPF Adjacency Issues

We've got a Cisco 7301 routers that forms OSPF adjacencies with an HA pair of 5020 firewalls. Recently I swapped this router out with a different router with the same IPs but different configs to test a new WAN connection. OSPF forms up just fine w

...

Unable to see Current connection output of DOS Statistics.

Bellow are the output.

PA-FW1 vsys4(active)> show dos-protection rule internet statistics

Rule: VDI-to-internet, idx: 0, id: 2
Classified profile: DOS-Classified
Classification Criteria: destination-only
Action: protect
Log Forwarding profile: default

Clas

...

Resolved! DNS Proxy listen to broadcast?

Hello!
I have a cisco wlan accesspoint (at remote site), which lost connection to central wlan-controller. Due to a mistake this ap still has static ip-address, so it does not send DHCP-discover/requests when it is started. But it sends DNS-requests s

...

show log traffic equal api or cli (ssh and scp or api)

Hi

i am looking and recover on a machine1 example: "show log traffic log (ip source destination port ect ..)

Machine1---> scp admin@palo ---->show log traffic direction equal etc ... export ..

or

https://palo/api/?type=op&cmd=<show><log traffi

...

Resolved! Help understanding application dependency tree

Hello all! I am trying to find more information about the attached image -

specifically when selecting an application in the process of creating a security policy, some applications appear to have dependency trees (shown)

In this example of SNMP,

S

...

Resolved! PAN 3220 10Gbps SFP compatibility?

Is it possible to use 10Gbps MM optics transceivers or copper in the PAN 3220?
I want to get 2Gbps to my edge and wondering if there's an option other than

bonding two 1Gbps ports. Thank you.

DHCP stuck at offer

Hi Team,

I have configured DHCP server on PA.

It is working fine.

I check GUI and CLI it shows one IP is sitting at offer

show dhcp server lease interface ethernet1/12

interface: "ethernet1/12" id: 75
Allocated IPs: 4, Total number of IPs in pool: 155.

...

Resolved! SCCM app deploy issue

I am working on testing improvements to our rule sets by breaking the rules into app groups as opposed to just allow all.

Pretty much everything is working fine except for OSD deployment via SCCM. In particular the O365 click to run installer. The dep

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help