General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

PAN-DB seed download PAN-OS version 9.0

Hi there,

I have strange problem where

according to this article

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/url-filtering/troubleshoot-url-filtering/problems-activating-pan-db.html

or / and this article

https://knowledgebase.paloaltonetwor

...

Single authentication policy across multiple vsys?

All,

I amtesting authentication policy for a certain project and was able to test it successfully with basic configuration. I am looking at a config where a single authentication policy could work across multiple vsys.

Scenario,

Firewall with multi-z

...

Panorama Template Push issue

Hi All,

I have an issue with a Template push to device issue.

I have added some routes in the BGP import section and have committed to Panorama without issue. When I push to device I run into a couple of separate issues which is causing me problems.

...

Panorama managing gateways with newer firmware?

Is Panorama running 9.0.x able to manage a gateway running 9.1.x?

Resolved! RADIUS Authentication issue

Once we test authentication, getting below error from radius server. Please suggest

Resolved! GP login without asking credentials

Hi Team

My firewall PAN os is 8.1.9 and GP version is 5.0.5.

Issue : Whenever I try to disconnect and connect the GP, its connected without asking credentials. If i manually give sign out from GP then only its asking for login credentials to connect

...

Resolved! Loosing USER-ID

Our AD based USER-ID seems to keep loosing the IP/USER association.

We only have a few rules which work some of the time and then fail with a blank user.

What's the best solution to get it 100%???

Rob

Resolved! No way to reach the linux GlobalProtect client download

I try to install GlobalProtect on my ubuntu linux, according to my workplace request.

I went here. The instructions there say I need to go to the support site here, select "updates" and "Software Updates".

However, there is no "Updates" section in the

...

unknown port 137 from GP users to Public IPs

I have GP users whose logs show multiple attempts to public IPs on port 137. I have checked this KB https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClLfCAK and made sure user-id is not enabled on Internet interface

...

SSL Decrypt on Virtual Wire deployment Certificate Issue (Chrome)

I have my PA-200 on virtual wire mode with Captive Portal using SSL Decrypt for all users with Self Signed Certificate.

When the users try to navigate on crhrome browser to internet they receive NET::ERR_CERT_COMMON_NAME_INVALID that doesn't permit to

...

WhatsApp Image 2020-03-25 at 19.20.07.jpeg

WhatsApp Image 2020-03-25 at 19.43.51.jpeg

MacOS connection errors while using GlobalProtect VPN client 5.0.8-4

Hi folks,

So i'm having pretty bad vpn problems while working from home. It's been happening for a while, but now that I'm working remotely every day, it's become unbearable. I hope someone can assist.

This is how it goes: I connect to my work vpn an

...

Login with globalprotect before windows login

Is it not possible in some way to launch the client from the Windows login screen, create a tunnel with the users credentials, and THEN log in to Windows? Or is the only way going the machine certificate route?

Certificate Renewal issue

When i renew the self signed certificate i got the error. i have restart the management plane but issue still same.I have all renew from CLI but issue still same. Please suggest me

Resolved! Traffic logs filter on syslog

Hello team,

We are sending all the traffic logs to our inhouse syslog servers. So whatever traffic is matching current security policies, all such traffic logs are forwarded to syslog server. Now in those logs, i am seeing everything like Source, Des

...

GlobalProtect opening Windows VPN settings

My company recently set up GlobalProtect to have us work from home. It works for everyone but myself. When I installed the app, it installed through the Microsoft App Store. When I try to run GlobalProtect, all it does is open a popup window with a l

...