General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! Global protect External gateway in remote user time format issue

In global protect I want to see the Total number of user are Login in and Log out at which time. In Global-protect Gateway when i click on remote user i see current and previous user connected to through VPN. When i fetch PDF/ CSV file. In file the time it will see correct but when i downlaod this file the format is change like 15182019 for lo...

Resolved! How to give supply to PA220 R

We want to power on PA220 R , but it requires DC power supply.Is there any options available in market to provide DC supply to this model ?Can we use SMPS for DC supply ?Can we get AD to DC power adapter from Palo Alto Networks ?

How to download the Report Latency, Jitter & Packet loss of last 3 Months

Hello Team,We need your help to generate the report of latency, jitter, and packet loss of the last three months.

New GlobalProtect VPN connected but network connectivity lost after short time

Hi all, Something must have gone wrong in my config I just don't know what. Here is the situation. This is a new setup on PA-820 we have the GlobalProtect license. Some users including myself will connect to the vpn fine, access resources on the network and within a minute or so the network resources will just drop and fail, no status change ...

ESXi Bootstrap Cant find init-cfg.txt

I'm testing out bootstrapping VM-Series firewall in ESXi. I've followed the documentation in relation to the bootstrap package etc. But for some reason when the firewall boots with the ISO I've created attached it complains that it cant find the init-cfg.txt file. See below error I see in the console on boot.btsErrorConfig: No init-cfg.txt file ...

IPsec tunnel connectivity issues

Hi, I have an IPsec Tunnel between 2 PA's and the status of tunnel and iKE shows red but the interface is green. Please advice on the troubleshooting steps.

Resolved! IPSec VPN phase2 partial up

hello everyone I have a IPSec tunnel with Cisco ASA, and the proxy-id config is:entry1: local 1.1.1.1 remote 2.2.2.2entry2: local 1.1.1.1 remote 2.2.2.3 The very annoying things the phase2 is partial UP, when "show vpn flow", either entry1 is active and entry2 is inactive OR entry2 is active or entry1 is inactive. Is this due to the incorrect co...

Backup and Restore PA Panorama and Firewalls setup to new infra in Azure

Hi friends, Want to setup a parallel infra for current production environment where current configuration should be used in new VMs(Panorama and Two Firewalls) . How can we export only current security policies ,objects, and import to new setup (manually creating 400 policies will be difficult) ?. New setup already have different basic configu...

phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A

i am able to establish tunnel with vendorcan ping the vendor lan ip but ikemgr shows2019-05-02 13:01:54.000 -0600 [PWRN]: { : 94}: phase-2 sa purge mismatch SPI:0x00000000/0x07A04C1A.

VPN tunnel and NAT rules

I have to create a VPN tunnel between two businesses. The main objective is that company A needs to provide access to the following subnets to company B: 10.10.1.144/2810.1.2.144/28 I've got all the tunnel info set up, and there is just a public IP address on each firewall as the peer IP. For company A where the subnets are located, I'm struggl...

shared policy for device group context

Hi , can anyone help me to confirm whether we can create shared custom policy for dedicated device group context

We want to hear your thoughts - Enhanced LIVEcommunity Experience

Now that the enhanced LIVEcommunity experience is live, we want to hear your feedback and also help address any questions you may have! Please use this discussion post to share your thoughts or ask questions. You can find a walkthrough of all of the enhancements made across the community here. Thank you for the continued participation and s...

Resolved! Why I see no logs for DoS policies

I am testing DoS policies and have alarm rate set as 1. I did not intend to be that low but I was not seeing logs under monitor for a server that is continuously used. There are flood logs from Zone Protection and they use a different log forwarding profile for easy differentiation. DOS policyAggregate and classified profiles used in policy

Traffic to one internet IP address to use specific interface and WAN IP

Afternoon all! I'm sure this is easy on our PA850 firewall but I can't figure it out. Interface setupethernet1/1 - Internal networks - Zone LANethernet1/5 - Primary internet line with /27 IP range - Zone WANethernet1/6 - Secondary internet line with /29 IP range - Zone WANA single virtual router for all interfaces I need to have outbound interne...

Resolved! Configuration Migration Tool?

All,Is there a tool to migrate the configuration of a 5050 running 8.1.11 to a 5220 running 9.0.x? Regards, John

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!