General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Traps Uninstallation Issue

I’m trying to install the latest version CortexXDR 7.02 however I’m unable to remove the previous Traps installation that is still shown in the registry files.

We are on current Traps agent 6.11.18549 and we can remove this successfully however unabl

...

Resolved! Phone calls random failing to connect at remote locations - Cisco Call Manager

We are in the process of converting over to Palo Alto firewalls at our remote locations from ASA firewalls. A few of our sites now are having some strange issues when attempting to make phone calls.We are a Cisco call manager shop.

Here is a basic se

...

Need to block WINSCP application but want to allow ssh

Hi Team

In sec policy I have allowed for some users only RDP and SSH application. But these users are able to use WINSCP application because WINSCP application also using port 22. I want to block winscp application but allow ssh application. How can

...

Resolved! SSL inbound inspection delay

hey all,

I've deployed SSL inbound inspection, connection gets really slow when SSL Inbound Inspection.
It takes almost one minute for the page to be loaded. Without SSL it takes 2 secs.

Would any of you have a clue what could be causing the problem?

...

Show A Warning Page When Loading A Block Website

Hey,

Is it possible to set up either a warning page or auto email to the specific user when trying to access a blocked site, currently it just doesn't load and wonder if I can set up a notification to the user that the following page is not allowed?

DHCP Server Reserve a long list of IP addresses

Hi everyone,

I have a list with more than 50 mac addresses, I want to configure PA DHCP Server to reserve IP addresses to these MAC addresses, is there an easy way to make reservation instead of enter these 50+ records one-by-one? Thanks.

Regards,

Dan

...

how to permit SSH access for certain IP addresses on PAN? They should be pingable and reachable too.

Please help me figure out how to allow SSH access for certain IP addresses on PAN firewall.

Thanks,

Roopa

Custom miner, 'Commit Failed: unknown node class', no nodes.json file

Hi All,

I followed the same steps as in the ytexample guide.

https://github.com/PaloAltoNetworks/minemeld/wiki/How-To-Write-a-Simple-Miner

Including putting my class in:

/opt/minemeld/engine/0.9.68/lib/python2.7/site-packages/minemeld/ft

By the

...

PA-850 for a home lab

Hello everyone,

I'm looking to purchase a PA-850 for my home lab but after doing some research I have some concerns.

I was planning on buying an 850 on eBay then getting the lab PAN-PA-850-BND-LAB4 through a VAR but I think I will have issues. Based

...

User-ID Mappings Not Showing

Hi All,

As the title suggest, I'm not getting any local user-ip mappings from our Active Directory Domain Controllers.

if I do a "show user server-monitor state all" on the cli I can see the output below (I've removed the domain controller hostname a

...

Resolved! DNS Proxy

guys,

i wanna achieve dns proxy wherein my requirement is as follows:

1. i wanna use my internet browsing PCs to use palo alto defined DNS which will use our ADSL 100mbps connection for browsing.

2. secondly, my other critical PCs will use DNS from exis

...

Need a catalog to select Paloalto UTM for our clients based on there user count.

Resolved! active/active HA with layer3 sub-interfaces

Hi all,

Is active/active mode supported with Layer3 sub-interfaces? I'm trying this in a lab with 2 VM-50's, and whilst the cluster is formed, I seem to have intermittent packet loss; not sure if this is just a limitation of the VM series (in particu

...

Resolved! Cloud ADFS Support for Globalprotect

We wanted to confirm whether GlobalProtect supports SAML for Azure ADFS (Cloud Based)
Do we have any document that has the configuration steps for this infrastructure?

I am not able to find one

Resolved! Custom miner, class not found, no nodes.json file..?

Hi,

I have an issue where the class of my miner is not found.

I saw lmori posting that you need to add your new class to the nodes.json file, however that file does NOT exist.

Tried both cloud init image and an own ubuntu 14.04 server.

Tried my

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help