General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Layer 2 MPLS pseudowire to span HA ports across sites.

Hello,

I'm still learning PA and I'm planning to create a pair in HA Active/Passive mode.

I was planning on connecting HA1A, HA1B and HA2 to a Cisco switch. Each port on a different VLAN. I was then going to trunk this traffic to a Cisco router (ASR9

...

End of life and end of support for PA5050 and M100

Hi All,

I would really appreciate if someone can let me know below details for PA5050 and M100.

1. End of life

2. End of Support

3. Replaced product

Thank you in advanced,

Gayan Samarakoon

Resolved! PA-820 Terrible throughput

Hi All,

I have a PA-820 running 10.0.3. Lately my main connection was a DSL connection that limited me to 12/1 (on a perfect day). However I finally got on to the Starlink Beta, hung the dish and started getting items setup. When I pass any traffic t

...

Trouble routing VXLAN traffic as it enters the outside interface

Hello community,

I am attempting to create a VXLAN over IPSec solution between my PA-3250 and a remote Fortinet FortiGate 61E. I have managed to get things configured correctly on the FortiGate (I think) as I am seeing the traffic entering on the Palo

...

Want to use IPv6 for bi-directional nat for VC.

Hi,

Want to use ipv6 for bi-directional natting only for VC. Want to know the procedure on how to configure it.

I have tried https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/nat64/configure-nat64-for-ipv6-initiated-communication.h

...

Resolved! Problem acknowledging alarms

I have an issue where I click acknowledge alarm several times, but the firewall refuses to update the status of alarms to acknowledged. Is there some absurdly long undocumented lag? Anyone else have a similar problem?

PA OOB Managment Interface question

How can I get PAN updates via the MGMT Interface if its on an isolated network inside my organization. NOTE: Its not on the internal zone. The route is working as i can see my packets leaving via egress when i ping from the host connected to the MGMT

...

How to control reverse DNS lookup through DNS SecurityLicense

The user was trying to send a mail from internal to external domain but it is blocking by sinkhole because it is showing as malicious traffic, however, we are able to receive from that malicious domain, Can we block reverse mail from an external serv

...

Resolved! Not able to see new threat ids

I have updated firewall contents to new version. After update also still I am not able to see newly added threat id under vulnerability protections profile under panorama. I can see those ids locally on firewall but not on panorama.

Wha could be the

...

FTPS connection impossible with AntiVirus, AntiSpyware or vulnerability protection is enabled

I have an FTPS server behind the PA. When I enable either AntiVirus, AntiSpyware or vulnerability protection with default profiles it is impossible to connect to the FTP server over TLS. The below errors are seen. When I disable these protections I'm

...

Resolved! How to prevent my firewall to stop responding to external DNS queries

Hi ,

currently if anyone from public network uses the external IP of the firewall as a DNS server and try to send DNS query , my FW is responding to that queries which is high risk .

how to stop FW from responding to any DNS queries knowing that the D

...

How to submit incorrect app classification?

I'm having some difficulty navigating this site. I want to submit the application "Xbox Music" as streaming music (http://music.xbox.com). Currently it's being classified under "xbox-live" (online gaming).

Registering a PA-850 (won't allow me to register the device)

Hello everyone,

My company recently purchased a used PA-850 from an Ebay listing. I have been trying to register the device so I can update the OS Version.

However, when we attempt to register the PA-850, the system throws an error saying it is unab

...

Resolved! Generate a report of applications being used within the network via Cortex

How would I go about generating a report of all applications being seen in Cortex/Network?

I would like to conduct an audit of the applications being used in our network for risk analysis.

Would XQL Search or Native Search be the best place?

Thank

...

How to force GlobalProtect user to always connect to portal

Hi Guys,

For couple of reasons, recently I started to think - Is there a way to force the users to always connect to the GP portal first and don't use saved gateway config?

I have noticed that we have lots of users connecting straight to the GP gatew

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

Resolved! Layer 2 MPLS pseudowire to span HA ports across sites.