General Topics

Discussions

Sorted by:

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Are You Ready for PAN-OS 10.0 and the ML-Powered Next-Generation Firewall?

In case anyone hasn't heard that the NEW version of PAN-OS 10.0 is going to be released soon, This will be a new ML-Based NGFW (Machine Learning) and there is going to be a huge launch event for it.

Palo Alto Networks is beyond excited to announce

...

Resolved! Warning: Disabled applications in vsys1

Hi,

For a while when committing we would see the message below because the applications were disabled. We have since enabled all of these applications, but are still seeing the same warning. Curious if anyone else has encountered this, and whether th

...

Resolved! 500 Internal Server Error - CAPTIVE PORTAL

Dears,

PA220 with interfaces as per below

ethernet1/4 19 1 Local-Network vr:RT-LAN 0 172.26.57.1/25
ethernet1/5 20 1 Local-Network vr:RT-LAN 0 172.26.57.129/26
ethernet1/7.105 269 1 Local-Network vr:RT-LAN 105 172.26.59.1/27
ethernet1/7.106 270 1 Local-N

...

Using MineMeld to build a list of IP addresses from a list of domains

Our current MineMeld instance is doing a great job of handling our Office 365 requests. Now I'd like to use it to solve a different problem, but I'm not sure how to go about it.

We need to allow outbound app-specific traffic to *.somedomain.com. I

...

PA 7.1.0 - IPSec SA goes into create delete loop after enabling tunnel monitor

Hi,

I am facing a strange issue in IPSec connection with PA (7.1.0) and strongswan (5.6.2) where I see Paloalto starts sending CREATE_CHILD_SA rekey requests to strongswan when I enable tunnel monitor. Earlier we were using strongswan (5.3.5) and d

...

Resolved! Source NAT on a IPSec VPN tunnel due to overlapping IP space.

Folks,

Our team has been tasked to work on a VPN tunnel from a customer premises to our corporate DC.

The access would be unidirectional with the Customer accessing on-prem resources.

The first challenge is that we have overlapping IP addresses at th

...

Resolved! Panorama Management of Remote HA PAN Pairs over a VPN

I have Panorama at our central site to manage PANs. I have several HA Pairs (PA-220 devices) that are remote and connect to Panoram via a VPN. Currently on the remote PAN HA pairs, Panorama can only fully manage the primary PAN. The secondary PAN o

...

Multiple ISP

Dear Team,

I have a query. One of the customers wants to load balance their Internet traffic between multiple ISPs ( they have 5 actually). Can we do that ? I know we can do for dual ISP. But will this be feasible ?

PA3250 - L2 - L3 interface communication

Hi Team!

I have simple topology ( pls see at the picture).

I configured eth 1/1 ( for PC2) as L2 interface, but without Security Zone.

I want to ping from PC2 - default Gateway (AE1.121) and PC1.

Is it possible to set up Palo Alto like this?

Pls, g

...

Chromebook Global Protect failing

I have Setup Global Protect but my chromebook is failing to connect, I thought my config was dud but I have just tried to connect with my macbook and it works exactly as it should.

I can't see why the chromebook wouldn't work, clearly the setup must

...

Resolved! Internet access

Hello all,

we have installed proxy server to DMZ now I wants to allow internet access to LAN user . What would be my security policies for LAN user to access internet through proxy server

I have created two policies

1. From trusted zone to DMZ

Source

...

Source IP issue. Urgent

Hi team,

I am facing the source IP mismatch region .

This is the IP 41.139.156.142 which shows up from Kenya, i have confirmed from https://ping.eu & https://threatvault.paloaltonetworks.com/

but in firewall traffic log it show like this IP belongs t

...

Palo Alto OSPF neighbor confusion

I have two down stream layer 3 switches both active running HSRP connecting to the active palo alto. Switch 1s interface connecting to the palo alto is set to ospf priority 10, switch 2s interface facing the palo alto is set to ospf priority 5. For s

...