General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! Error during Commit operation

Hello,

if you encounter this while performing a commit:

Error: Certificate 'XXX' failed to load: parse tbs certificate dn failed
Error preparing global objects
failed to handle CONFIG_UPDATE_START

try these commands in the CLI:

debug dataplane reset...

Resolved! Palo Alto Software Visio files

Hi all,

I am looking for the Visio stencils for PAN Azure deployments. There was one floating around that contained all the Azure deployments etc which was really useful. I think it was for Cyberforce members only but I can't seem to find it.

htt

...

URLfiltering Response page for Override with redirect mode does not work

I created a loopback interface that has the Response Page management option enabled. I setup up the override action for social-networks category in the URL filtering profile and setup the Device->Setup->Content-ID on override with the IP loopback add

...

How to get the full CA Issuer URL when it is truncated in the decryption log

Hi guys,

I am checking the decryption logs, to repair the certificate chain as mentioned in the guide below:

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/decryption/troubleshoot-and-monitor-decryption/decryption-logs/repair-incomplete-ce

...

EVE-NG Setup & VMWare installation for Palo Alto & Multi vendor devices

VMWare installation & EVE NG Setup step by step for Multi Vendors Devices

As for every IP Network Engineer readiness of the simulator especially the multi-vendors environment, EVE-NG is a big headache. But honestly, this is very simple and only nee

...

PanOS 11.1.5 (and others with the fix for CVE-2024-2550) still not preferred?

Might anyone know why 11.1.5 and 10.2.10-h10 (or anything newer) are still not marked as preferred 3 months after release?

We're on 10.2.x now and likely would upgrade to 11.1.x, but I figured waiting for the patch for CVE-2024-2550 makes sense.

...

Resolved! Device Certificate fetch failure

Version : 10.1.6-h3

Issue/ Error log : Failed to fetch device certificate. Failed to send request to CSP server. Error: No OCSP response received(dest => 35.222.13.89)

Tshoot : Generated OTP over support portal but no option for me to key in the OTP

...

Two separate PA one the same ISP on both location

Hi,

we have two PA fws around 1km in bettwen.

They are connected with dark fiber so users on both side can see each other.
One the same ISP on both side, and public IP address range of /28 addresses.

We are using that public IP address for several s

...

Resolved! Renewal of license

Dear team,

I have four firewall devices whose licenses are expired. I am unable to get the vendor we bought the devices from. Could you please guide me to purchase new licenses directly from Palo alto.

Regards,

Lamin.

Resolved! Explicit allow to Microsoft Update services

I've read through a dozen questions and the scores of answers to those questions, and I'm finding a mix of outdated information, bad information or just unrelated options... I suspect this is going to send down a rabbit hole, so I'll try to compartm

...

natted public ip

Demo Lab Environments - No Longer Available

I was going to review some Panorama setting options in the demo environment and the demo environment is no longer available. Did Palo Alto decommission these labs and was there any communication about it? If so, can anyone provide the communication?

...

Verify and test backup firewall

Hello

How we can verify and test the backup file ?

Resolved! Clear SSL Certificate cache

Hi,

We have a PA-500 and I can view the SSL certificates with: "debug dataplane show ssl-cert-cn"

I was told that this is the list of SSL certificates that are stored in the cache.

However I'd like to know how to clear this cache

Thanks

List of domains to allow for in-flight WiFi

Hi all,

I've been working with a number of customers lately who have been trying to gather a list of in-flight wifi domains that they need to allow as GlobalProtect Enforcer exceptions and I thought I'd share them here. I'd also ask that you please

...

Discussions