General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Two Palos (not paired) on the same LAN have duplicate MAC addresses

I have two datacenters each with independent Palo Alto setups

Each site is configured Active/Passive, there is no peering of the Palo's at one site, with the Palos at the other site.
My Cisco L3 configured switches are reporting a duplicate MAC address

...

Resolved! Panorama Upgrade

Hi All,

I carried out an upgrade on a Panorama appliance this morning, M-100 model.

Went from 9.0.6 to 9.0.9-h1. Process was fine however it needed a cold boot (pull power cables) to recover, it did not come back on its own.

Couldn't even console to

...

Blocking ilovepdf application on Palo Alto

There is high risk app (ilovepdf) used which got identified in CASB in our corporate network & management informed to block this app in Palo Alto. Please let me know if there is any option to block ilovepdf app only specifically in Palo Alto firewal

...

Palo Alto - SSL ciphers that offer medium strength encryption

We used Nessus tool to run security scan on the PA-5020 & PA-3020 series & it identified with the following below medium vulnerability:

"The remote host supports the use of SSL ciphers that offer medium strength encryption"

Please let me know, for an

...

Palo Alto - The server's X.509 certificate cannot be trusted

We used Nessus tool to run security scan on the PA-5020 & PA-3020 series & it identified with the following below medium vulnerability:

The server's X.509 certificate cannot be trusted.

Please let me know, for any fix to this vulnerability.

Resolved! Traffic from GlobalProtect stop working after upgrade from 8.1.11

Hi,

I have two PaloAlto 3020 in an active-passive cluster. PanOS 8.1.11 is nstalled on both. Everything works correctly, internal traffic, traffic from GP Client, vpn tunnels. GP clinets connect, sends HIPs, Palo recieves this HIPs, traffic is passing

...

Resolved! Error message in System logs

We have a PA that is displaying this message every 60 seconds for some reason.

"highopaque: DO NOT CHOOSE WMI in ADGMEL03 FOR YOUR USE CASE IF SEE THIS LOG AGAIN"

What is it indicating and how to turn it off?

Problems with the support Portal

Hi Team,

I need to open a new case from the portal, however pressing the create case button gives me an error and does not allow me to even verify the cases that I have open.

Regards,

Traps Agent alert disconnected->unlicenses

Hi,

We just realised that our ESM shows "agnet service status changes": Disconnected->Unlicensed". But we have a current licenses. How can tshoot this issue?

Aruba clearpass user id issue with Palo Alto

We have ClearPass integrated to Palo Alto. ClearPass sends user-id to the firewall upon successful authentication. Customer is experiencing an issue where the laptop (on wireless) would fail to access Internet at re-authentication.

There is another

...

How to give only office 365 app with no url filtering linsense

Hi everyone how can I give only office 365 app to users and give no permission to access other web browsing without url filtering linsense, help.

Resolved! ftps/ftpes

How can I allow an FTPS (FTPES) connection? I assume the PA tracks an FTP connection and understands the related data connection. Does it understand FTPS? If I set a policy for ftp, it fails when it tries to open a data connection.

Kim

dpkg --add-architecture armhf apt-get update apt-get insta...

Discussions

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource