General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Expedition Tool Cisco to PA

I am having an Existing setup of cisco where all my ISP are terminated which is a standlalone device ,now migrating to PA 3220 with HA,but over here my ISP will be terminated on switch and from switch one cable to PA 3220 will be going...how do i mig

...

Resolved! can use Cisco console cable to connect to Palo firewall console port?

Hi, can anyone please advise whether we can use Cisco console cable to connect to Palo firewall console port? Thanks in advance.

Custom Report Start and End Times Inclusive or Exclusive

I am exporting a Custom Report to a CSV and want to make sure I don't miss any data.

Scenario 1: I want to include a full day's logs in one file For October 1, 2020. Would I set the start time to midnight and the end time to 11:59 PM, or would I put

...

Screen Shot 2020-10-03 at 1.48.55 PM.png

PANOS10 Security Policy Not Matching Randomly

Running a PA220 with PANOS 10.0.1 Simple NAT/Security policy in place to permit an outside application access on X port. Traffic flows as expected, although randomly traffic goes unmatched and is dropped by the FW. Jiggling the handle by remapping

...

Zscaler and Global Protect Compatability

Does anyone come across issues when we are running Zapp and Global Protect client together on MAC.

We have GlobalProtect with split tunnel mode and we are in phase of migrating to Zscaler solution. We deployed Zscaler with ZIA enabled to for set users

...

Resolved! Wildfire Virus detected on firewall but not on Wildfire Portal

Hi,

the file t32.exe is considered as wildfire-virus Win32.WPCGeneric.cnp and blocked on the firewall.

But when checking this file on Virustotal and eu.wildfire.paloaltonetworks.com/wildfire/ it is considered as benign.

https://www.virustotal.com/gui/

...

Resolved! IPSec Transport Mode

I cannot find a way to configure the IPSec tunnel encapsulation to use Transport Mode versus Tunnel Mode in either the GUI or CLI ... anyone have insight into this?

Resolved! Query on Path monitoring

Will Path monitoring kick in if Enable HA is not selected?

One of the KBs mentioned path monitoring failure which cause the loop condition.

Minemeld High Availability

MineMeld needs to be deployed in a high availability model, so if one goes down firewall will not start blocking allowed traffic from the rule base. What is the recommendation here?

Evaluation License

Hi guys,

How do i get or buy evaluation license here? I do not see a link that suggest where to get or what process is needed. I'm running a PA lab on EVE-NG and wanted to be able to run Panorama. Now, i know to do that, i need to get a eval license

...

Resolved! PAN-OS upgrade procedure from 8.0.3 to recommended 8.1 8.1 feature release.

Model: PA-500

Need to know the,

1. What is the recommended maintenance release of 8.1 feature release.

2. Upgrade procedure of HA cluster(Active/Passive)

Resolved! Recommended Software release

Hi PAN Community!

I'm just wondering if there's a dedicated page/link I can refer to if I want to confirm if a certain release is recommended or not. I don't want to raise a TAC case everytime. Thanks!

Rules check by logs with expedition

Hello,

For one of our client , using PA 850 in cluster,

They have 8 zones for voip , printer , camera etc

And all the security policies are wide open.

Now we want to restrict the policy by looking at logs from each zone towars other.

Can we export lo

...

Microsoft IP ranges and FQDN-s in outgoing rules

Hi all,

must be someone had similar thoughts too,

we have a customer who'd like to secure outgoing traffic, by specifying not only applications, but also restrict destination FQDN-s and/or IP ranges.

Issue with Microsoft is that their FQDN-s, and moreov

...

Palo DHCP Server

I have been having issues with DHCP server reservations on the panOS 10.x

I make reservations and I have found some devices i made reservations for get other IP addresses at times and botches my policies.

Anyone else have this issue?

Discussions