General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! False positive (Generic.ml) detected for our application. Can you help me white list?

Hi Support,

We are getting a false positive on our application from the Cortex XDR.

Can you help me with how I can get the app white listed?

Application type is Win32 exe

VirusTotal: https://www.virustotal.com/gui/file/1f7b6a4d788f577e1f75a25a56c9eecd8

...

ISP Router connection best practice

Hi All,

Just looking for advise , pros vs cons about connecting an ISP internet feed directly to our core mpls/vpls switch.

ISP Internet Router—>adva—>Core Switch(siteA)—>mpls/vpls—>Core Switch(siteB)—> Palo Alto

The PA firewall will have a separate

...

Panorama HA Firewall PAN-OS Upgrade Clarification...

My apologies for the length of this post...I am trying to understand how to best upgrade PAN-OS through multiple major releases on a configured HA set and I may not be explaining myself effectively...here it goes.

I am preparing to upgrade a PA-220

...

Migrating Palo Alto's

Quick question regarding changing model of Palo Alto's. We're moving from a larger model to a smaller. Is there a guide I could use for this? From what I've gathered so far the two firewalls have to be on the same software version? is that the only p

...

Resolved! IP Pool Assignment

We have deployed a PA-VM into AWS running 10.0.4 and are currently trying to configure Global Protect to secure our developer connections to our AWS environment. We have a Global Protect Gateway deployed and are able to establish a VPN connection. Th

...

Resolved! Policy based routing

Hi,

Do we need a security policy, once the PBR configured in the firewall?

OR

FW just forward the packet to the Egress interface and not look for the security policy.

Thanks.

Resolved! The 7 byte custom signature minimum

Hello Palo Alto,

I am doing a custom combination signature for brute force/Layer 7 HTTP DDOS protection. I am using "http-req-params" to block more than 5 attempts in 10 seconds for a particullar site (

https://docs.paloaltonetworks.com/pan-os/u-v/cus

...

Resolved! PA-5220 App Update issues

In my environment, we must update our apps manually. One machine allows it to be updated like normal through the device menu, but on other machines when uploading the app file, it just keep showing the progress bar and doesn't go any further. Has any

...

Globalprotect users cert renewal process?

I have 20 GP users that has certificate check as first factor of authentication. The certs are set to expire in a month. If I renew the cert and export it to them on a USB stikc, will that break the connection until the certs are installed? What is t

...

URL Filtering reponse page into iframe

I have a situation, where on some page which is allowed in URL Filtering: ex. allowed_site.com I have an iframe with another site which is blocked on URL Filtering: block_site.com. I have configured response page for block action. But when I open all

...

Resolved! Is Anyone Able to To Set Up Google Authenticator For CSP Access?

This in regards to accessing the Palo Alto Customer Service Portal (CSP).

We have enabled 2FA at the system level for CSP access and are using email for 2FA. I am following the directions here for setting up Google Authenticator instead of email fo

...

Resolved! EDL IP list entry..

Hi Team,

We have EDL configured and there are many IP entries in that EDL but now for some reason we have to keep source address in edl as blank.

Can you confirm that removing source address will not impact the list of IP entries in that EDL since w

...

Resolved! MSMQ (TCP1801) - Unknown TCP

Hi guys,

I have an issue allowing traffic between different components of the SolarWinds on port TCP/1801 for the application "Microsoft Message Queuing (MSMQ)". The traffic is recognized as unknown-tcp. I tried to identify an application that could m

...

Resolved! The installed version of PanOS on my pa-3020 is different then the installed version listed on my name configuration snapshot. Is this a bug?

On my pa-3020, we have PanOS 9.1.4 installed, 9.1.4 is shown as the installed version on the PanOS web UI. However, when looking at the name configuration snapshot, the name snapshot says the installed version is 9.1.0.
Is this a common error to see

...

Resolved! Enabling IPV6 S2S site to site VPN tunnel

Does anyone know how or were I can locate documentation on enabling and adding IPV6 IP into my existing VPN tunnel? I have been looking in Beacon training but I cant find what chapter or training this actually falls under. All I was give from the cus

...