General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Drops in packet capture

Hello Team,

I have a question regarding drops during the packet capture.

What is the packet drop means - Firewall dropping any packet or firewall detect drops packet.?

Once i performed the packet capture at the same time i have run the command global

...

Resolved! Zone Rename effects on Panorama and Managed Devices

Hello Everyone

I have simple but very important questions about an eventual Zone Renaming in a Template commited and pushed from Panorama to a Managed devices:

1. Changing Zone names inevitably will have an impact on an active sessions ?

https://kn

...

Resolved! Aggregate Interface Trouble Shooting

My environment has Palo Alto Firewalls that has Aggregate Interface configuration and use. There are infrequent issues with them and I have some questions:

What are the tools for trouble shooting Aggregate Interfaces within the GUI (web interface)
What

...

Resolved! Assign gateway to PanGP interface

Hi,

We have issues with a service using GP. To solve it we add the IP Palo GP tunnel in the PanGP adapter gateway in local machine. Why this is happening? is there any way to configure this pangp gateway from palo alto when user connects in GP?

Question on getting started with Reconnaissance Protection thresholds

I know the question about how to set Reconnaissance Protection thresholds has been asked dozens of times. The answer is always "it depends on your environment and situation". I understand that there can't be a one-size fits all best practice. It se

...

ready only access to Logs

Hello -

Will enabling any of the logs like traffic, url etc in the web UI in admin role profile give more than read-only access to the users with the profile? Asking because I don't see read-only option, just enable and disable.

Thanks - Jisha

Policies with any zone in source and destination

While migrating from checkpoint to Palo Alto after defining zones and interface.

Can I simply use any in source and destination zone and create policies with specific objects in source/destination address.

Will it work, for replicating same policies wh

...

Alarm Log Forwarding

Instead of seeing alarms when I login to the web GUI, how can I get alarms forwarded? I'd like to send to SysLogs and also receive via email.

BGP Table before IMPORT/EXPORT

Is there a way to see the BGP prefix before they've been processed by the IMPORT or EXPORT rules ?

Thanks,

DL.

Resolved! tech support file

Hello,

Is there a way to remove "tech support file" on PAN ?

Regards,

Yannick,

Palo URL Categorisation process

We have been attempting to use URL Filtering to block access to web based email using the Palo Alto URL Category web-based-email.

We have found however that there are many web based email services that are not included in this category, including one

...

Resolved! UUID and HA - dashboard running config not sync'd with peer

We have updated an PA-220 HA pair to 9.0.7 and as expected see Policy Rule UUIDs.

We also manage a separate population of FWs by Panaorama 9.07.

From the release notes for HA deployments:

policy rules sent by Panorama with apply to both HA member fir

...

Carbon Black Threat Feed

Hi,

I noticed in the code that if you use the v=carbonblack parameter on a feed node it spits out a Carbon Black Response formatted feed which works to the point you can load it into Carbon Black Response (ie CB accepts it and it appears with the Min

...

Resolved! VLAN Palo Alto

Hi,

I am fairly new to this firewall PA-220R. I have a workstation that has 5 NIC's. One is on a 192.168.100.0/24 range and the other is on a 192.168.130.0/24 range. The 100.0 range can reach the firewall. I have a device plugged into port 4 of the f

...

Resolved! DSCP TAGING

Hi

could you confirm me, if the tagging DSCP is not flushed via the Palo Alto.

I need to use an avaya VOIP solution and a dscp tag 46 is added to the packet.

thank's

Discussions