General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Global Protect AutoConnect Issue on Corporate Network (Onsite network)

Global Protect AutoConnect from WFH but not on Corporate Network (Onsite network)

why firewall drop server hello message

network flow Lan Network -->Firewall A----->switch -->-Firewall B ---->Internet-------->Database server We are facing issue to connect database server from our lan network.We took packet capture on Firewall A and firewall B .When we initiate traffic from LAN network to database server:Firewall B ; We are getting client Hello and s...

allow website with non standard port

i have to allow a specific website with non standard port , but already have policy allowed "any" services . still the cannot open the page and incomplete app type in the traffic

Firewall integration

Hello,There was a question about integrating a firewall with third-party sandboxes to send files for review, such as cuckoosandbox or checkpoint, is there such an opportunity and where can I find documentation or information about similar experiences?they say asianpussy is the tastiest and most beautiful sounding. you can check it out by looking...

EDL blocking URL

We have a feed for ELD in Palo Alto. We realised that we add this URL (https://unrealengine.com) this web is been blocked properly, but not "https://unrealengine.com/en-US/donwload.For example, www.unrealengine.com. The URL part does not block the URI part either, only if you add it as a domain (without the URI part), it blocks effectively. it c...

Resolved! User authentication - Global Protect

HI.I'm pre-staging a couple of PA2020's (active/passive), and am having an issue with getting authentication via AD working for Global Protect through Active Directory.As far as I can tell, the LDAP configuration is correct - the firewall connects to the agent, and gets a list of users from the groups I have configured to be allowed - but every ...

Resolved! Global Protect client disconnects every 5 minutes for 1 minute

GP client disconnects from VPN every 5 minutes for about 60 seconds.During the disconnection the is no connectivity to internal resources (Chenking pings for example). Internet connectivity is OK during the disconnection.The issue is related to internet connection (User / Laptop works fine on another location.)After 60 seconds the client detect...

URL geting block

Guys, I have been issued with one of my clients not accessing the URL after adding the URL in the URL category and keeping them the alert.I check the URL traffic the traffic block by real estate and the website category client want is also real estate but I added all possible URL in URL category add into url profile keep the real estate block st...

PA-3220 | SW10.0.5 | Slow Login

Hello Dears, I hope you are doing okay, I have PA-3220 with OS 10.0.5 with GlobalProtect Agent 5.2.6, i am facing a very very slow log in to GUI that takes sometimes 5 minutes to log in whether from internal or external through VPN. Any suggestion what is the reason behind that ?!!! Best Regards,

Resolved! difference zone between end users and domain controller on Palo alto

Hello all, I have a problem with palo alto PA-850. I configure domain controllers and end users diference zone. example: zone name: Server for domain controllers, and zone: User for end users. I setup policy to allow all traffic from Zone: Server to Zone: User and from User to Server. but end users could not authenticate with domain controllers....

Resolved! SSH timeouts across the board or per policy?

Are the application timeouts across the board for something like SSH? Meaning for user SSH connections through the PAN and admin SSH connections to the PAN that application controls the timeouts for both?

Not able to add app;ication in PBF rule

Hey guys my client want some applications traffic to go through ISP2 when I create a PBF rule for that add application I get some specific error.I updated the apps and threat the latest version. PA-220 .PANOS version is 9.1.8

Resolved! Why a forced Target Negate No?

I've had a case open with Palo Alto support for over a month and the person I got says they've not seen this issue before. I doubt we are blazing new trails here and I just don't understand how this can actually be unfamiliar.Our Palo Alto is a recent install of a converted configuration from a different firewall platform. The implementation ven...

Resolved! Issues with VPN to AWS

Hi I appreciate this is an odd one but I have a little bit of an issue with my home setup, I have a pa-220 behind a sky router, the issue is that if I am coming from the inside network i.e mgmt interface that traverses the inside zone to make it out then I can ping anything I want, however if I am trying to source the ping from the external inte...

Resolved! URL Content Filtering Removal?

One of my sites appears to be blocked by URL content Filtering as a 'Hacking site' I poked around on our end and it seems to have come through a definition update(?) How do I go about getting it removed? Clearly since i'm asking, it isn't a hacking site just a list of mostly freeware. It seemed to happen after I added 'hacker scripts' to my l...

Discussions