General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Password Profile

Hi Experts

We need to setup a password profile with the no expiry condition for the service accounts which has read only privileges. Version is 8.1

1. If we set the Required Password Change Period (days) to 0 days, does it mean it's expired (with 0 d

...

Live Community members - we want your feedback!

While we may operate the community from day-to-day, the Live Community is really YOUR community. Sure, we may have ideas about what might be helpful or interesting but since the community is yours and exists to help you, we ALWAYS welcome your ideas,

...

Resolved! Office 365 App-ID

Hi,

We are in the process of implementing office 365. May I know what is the correct APP-ID for the below services? Please share if there is any best practice document for this.

Microsoft Stream
Audio Conferencing
My Analytics
Azure Active Directory
Az

...

Resolved! HA Cluster Network Topology

Hi Everyone,

I'm new to Palo Alto and now I plan to deploy 2 Palo Alto 5250 in HA Cluster mode, each firewall take place in a Data Center. This two Data Center is in same City. That why I think HA Cluster suitable in this situation. These 2 new firew

...

Lot of non-syn-tcp

Hi Experts,

we have a lot (I mean a LOT :-)) of non-syn-tcp traffic on our PA5220 cluster. The PA is in an enterprise company.

Are we sure that the non-syn-tcp means that there is an asymmetric flow? Let me give you an example:

1) Host A sends a SYN

...

Resolved! PA 5220 aho and dfa offload

Do i need to enable aho and dfa or not ?

Running 8.1.9 on PA 5220

debug dataplane fpga state

aho offload not ready

dfa offload setup
Use software only

Report of Number of concurrent sessions per day / month

Hi all,

I was wondering if it would be possible to have a report that on a daily base (with a monthly overview) would should me the average amount of concurrent sessions for that period, based on a specific virtual wire or interface.

I noticed that t

...

Can't get Wildix phone book working - Source address shows as WAN IP not LAN IP!?

Hi all, where I work, we are having difficulty in getting the Wildix IP Phone Phonebook to work through our PaloAlto PA-220 firewall what we use for all SIP traffic. (Wildix is a make of IP phones we are using.)

I keep seeing dropped traffic like the

...

PA and ASA n route mode

Hi,

I have the below topology

PA and ASA are in routed mode .

The first question is the design is valid?

I am facing a problem in this design

ASA says the secondary is failed ,primary asa says the secondary and dmz zone interface failed

Thanks

Secure web-GUI access for managment

Dears,

When i log in my firewall it is showing the connection not secure.

For secure connection login, i have gone through these documents and try to configure a secure connection for web GUI access.

How To Configure A Certificate For Secure Web-GUI

...

Panorama HA

Hi Experts,

We've Panorama in HA mode running on 8.1 and due to some reason, secondary is now active. Once the primary is back, with the preemptive checked, primary is still passive.

Can someone please assist why primary is still passive?

Note: pls

...

Global Protect issue with Windown server 10

The issue is that when I connected to a server through Global Protect, I can't connect to another server.
I have to disconnect from Global Protect and then connect to the desired server. So basically he can connect to one server at a time.

However, wit

...

Resolved! PA-2020 Update PAN OS 7.1.11 possible?

Good morning,

we have a PA-2020 with sw-version: 7.1.11

Can I update the software version to latest PAN OS?

We want to use SAML 2.0.

is there a way to achieve this?

kind regards,

Roland

warten mit Login admin / admin
show system environmentals
----Thermal

...

SD-WAN internet link (DIA) monitoring

I have a PA-220 with dual ISPs (WiFi and LTE). I tried to configure SD-WAN for direct internet access (DIA). Both gateways (routers from both ISP) are localy connected via ethernet. As far as I know, SD-WAN pings the gateway IPs to calculated the lin

...

Problem with routing of NATted reply packets over IPSEC tunnel

I have an IPSEC tunnel to another organisation, they have two endpoints at the other end on addresses which conflict with our networks. We can just focus on one to keep it simple.

We have an IPSEC tunnel set up and passing traffic fine (tunnel.3 int

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help