General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Way to see hardware type installed on 7080?

Is there somewhere in the GUI (or more likely a CLI command) that will show me the hardware type of the cards I have installed on my 7080? Specifically, I am trying to see if I have an SMC or SMC-B.

Thanks.

Resolved! Path Monitoring for Alerting Only

Hi,

I'm interested in using path monitoring for alerting. I'm aware that it can be used with PBF, static routes, HA, etc, but that's not quite what I'm after. I have BGP to manage that side of things.

I would like to monitor the path to the internet.

...

SD-WAN OSPF

Hello Team,

I just wanted to know that does PA SD-WAN supports OSPF ??

Or it only supports BGP.

My use case is as below Branch and a Hub to SDWAN

I have Internet links and Orange MPLS links and I have OSPF on OBS router and on the firewall

After confi

...

URL Block / Continue on SSL - doesn't continue, page just refreshes.

I have a "continue" policy set on newly registered domains category. If I visit a site with https I see the continue page but upon clicking continue the block page just refreshes (the guid in the address bar changes).

If I visit the site without S

...

Apps/Threat out of Sync on Passive Panorama.

On one set of panoramas I noticed that the Apps/Threats are out of sync. The passive device downloaded, but did not install the update like the active device did.

The active device is set to sync with peer during the scheduled update.

The trouble is t

...

Resolved! Using public range of IPs

I have a bit of a silly question to ask but my mind is drawing a blank on this. If you have a connection from the ISP, say the static IP range is 14.1.1.0/30....their router is 14.1.1.1 and the PA FW will be 14.1.1.2. Simple enough but what if they

...

AE interface showing higher bandwidth than physical interface

The physical link in the firewall shows lower bandwidth as compared to the aggregate link on the same. Referred the SNMP logs which capture the same, please refer to the screenshots attached and let me know if this an expected behavior or not?

File blocking

Dears,

I am not able to block msi file via file blocking profile.

I have created a file blocking profile to block msi and different types of file extensions to block by the policy.

Then I tried to open exe file in the chrome browser which is working fin

...

Resolved! Interzone Static Routing

Hi all, I'll preface this as I'm the sole networking guy at my job and I'm still green. Apologies for any dumb questions, I've tried to read the manual for relevant info and used my google-fu to no avail.

I'm using a PA-3020 on firmware 8.0.6.

I've b

...

Resolved! Status Incomplete

Hello,

what does this mean and how to solve it?

When doing an show arp all:

No MAC is displayed at an IP address.

Any help is welcome, thanks in advance 

user-id server monitoring error: NT code 0x800705af

Dear community,

I´m trying to add a new AD server to server monitor list in order to retrieve user-ip mappings and get the following error:

" WMIC message from server XXXXXXX: NTSTATUS: NT code 0x800705af - NT code 0x800705af "

Does anyone have any id

...

Resolved! Password Profile

Hi Experts

We need to setup a password profile with the no expiry condition for the service accounts which has read only privileges. Version is 8.1

1. If we set the Required Password Change Period (days) to 0 days, does it mean it's expired (with 0 d

...

Live Community members - we want your feedback!

While we may operate the community from day-to-day, the Live Community is really YOUR community. Sure, we may have ideas about what might be helpful or interesting but since the community is yours and exists to help you, we ALWAYS welcome your ideas,

...

Resolved! Office 365 App-ID

Hi,

We are in the process of implementing office 365. May I know what is the correct APP-ID for the below services? Please share if there is any best practice document for this.

Microsoft Stream
Audio Conferencing
My Analytics
Azure Active Directory
Az

...

Resolved! HA Cluster Network Topology

Hi Everyone,

I'm new to Palo Alto and now I plan to deploy 2 Palo Alto 5250 in HA Cluster mode, each firewall take place in a Data Center. This two Data Center is in same City. That why I think HA Cluster suitable in this situation. These 2 new firew

...