General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

transition from trial to purchased license

Hi All,

We are in a scenario where we are running firewalls on trial licenses.

We have purchased the licenses. Can you help me with following queries :
1. When firewall transition from trial -> purchased license, will firewall drop the network tr

...

Is there a way to disable response page for interface?

I am blocking some applications coming inbound from the internet to a certain IP. This creates a response page when I have application block response page on. How can I stop response page from being server to outside zone?

Resolved! 2 Tunnel With 2 IP Public. Secondary one is filtered ?

I have two IPSec tunnels with 2 ISPs:
ISP 1 is Primary
ISP 2 is Secondary
with a Failover scheme.

But when I set the metric for ISP 1 to 10 and ISP 2 to 200, it seems that the public IP of the second ISP cannot ping the second tunnel's peer gateway, w

...

URL logs missing for Traffic through alert only URL category / profile.

Hi All,

Software Version11.1.2-h3

We have a strange situation: Some URL filtering log entries for valid visits to web sites are missing. The traffic goes through a security rule which has a URL filtering profile with only alert and block categories

...

Resolved! VM PA Firewall on esxi

Hi Team,

I am trying to install a vm pa firewall on esxi host. Downloaded the ova of 11.2.0 base image and installed. When I configure management interface it comes up. But none of the data plane interfaces are coming up. Reinstalled once again and

...

Change of models managed by panorama

Cordial greetings

Team

I currently have a PA 220 managed from panorama and we want to upgrade it to a PA440. The idea is to keep the same configurations of the 220 device in the 440. The question is, how should this process of device change be done?

...

Pre-established BGP connection to HA?

All,
I'm looking to set up established BGP connections from the upstream routers (Cisco Nexus) to the HA unit in our A/P setup for faster failover times, and to not make it look weird when trying to determine if adjacencies are up to the primary unit

...

Resolved! DNS sinkhole , some questions

I'm a SOC analyst, and we receive firewall logs regarding DNS sinkhole alerts. I'm trying to understand them better.

I have received multiple logs of this type, and I want to make sure I understand them correctly.

In this log, the domain that was q

...

Brand new PA-1040 interface 1 & 2 in red link state problem

Dear All,

I got a brand new PA-1040, and i have choice standard mode rather than ZTP mode from the beginning and i found that interface 1 & 2 are in red link state, even i connect a network cable into these port and i still see there

...

Resolved! pa-450 software no update information available

Hi,

I installed new pa-450 on 10.1.3 from config exported from pa-820 on sw version 9.

Device is registered properly. Dynamic updates work without any problems. All licenses are resolved properly from license server and applied properly.

During softw

...

Aruba Central - Palo Alto - User ID Question

Hey Guys,

I have a bunch of access points in Aruba Central, we are currently using UserID as a way to assign username to IP address with Palo Alto. I have found these instructions https://www.arubanetworks.com/techdocs/central/latest/content/aos

...

Firewall in Not Ready state after Factory Reset

Howdy! I recently inherited a PA-5050 from work for my homelab, and I go to try and configure it, but I notice that the firewall states that it isn't ready, and whenever I try committing a change, it says All daemons are not available. It was in a wo

...

Running SSH commands

We have a used Palo alto PA-3050 and with a support of someone in this community have configured the management IP address and default gateway. We have used the web interface to configure DNS.

The device is running PANOS 9.1.15-h1 and we understand t

...

Panorama restore from HyperV replica

Dear awesome ppl,

I was wondering if anyone done any Disaster Recovery for Panorama? I would like to pull the entire HyperV VM from our backup..to restore Panorama virtual appliance..don't really want to get rebuild with the config file as Sdwan ZT

...

Resolved! PAN OS Upgradation

Hello Team,

I am planning to upgrade my Palo alto device which model number is PA-4050, current software running on that firewall is 5.0.11. I need to upgrade that in N-1 version could you please suggest the upgradation path so that I can download

...