General Topics

Discussions

Sorted by:

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Global Protect SSO with Pre-login using Certificate Issue

We are rolling out GP with SSO with Pre-login using certificates as of last week. The GP agents are connecting at pre-auth and subsequently doing SSO once the user signs in with cached credentials.

After the weekend, we are having multiple users rep

...

Resolved! Block email attachment from specific domain

Hello experts,

Is there any way in Palo Alto to block email attachments coming from specific domain?

Lets say i want to block all email attachments which are coming from *@xyz.com. Is it possible?

Globalprotect is greyed out on maOS Catalina

Globalprotect stopped working on user's Macbook. After reinstalling Globalprotect (version 4.0.5-8) on macOS Catalina in version 10.15.4, it is not possible to click on Connect, even the window for writing username and password is not displayed. All

...

TLS Vulnerabilities.

I am running Minemeld on Ubuntu 16.04

The server is starting to show up in Vulnerability Scans depsite updating Ubuntu.

This is a list of the Vulnerbilties.

TLS Server Supports TLS version 1.0TLS Server Supports TLS version 1.1Diffie-Hellm...

Global Protect Gateway

Hi everybody, I'm getting through this issue: although we have 3 gateways configured in our portal, my GP client allways connect to the same one. How to deal with this client behavior?

Tks in advance

Email Alerts for Reporting

How we can set up email Alert for report

We have an O365 email environment that is based on Azure Cloud.

looking for Email alerts for reporting and My Email ID has MFA for accessing the emails.

Now I have applied my Email ID in the Palo Alto 3060 for

...

Resolved! Keeping UID to IP address Associations Current - A.K.A. UID Refreshes / Timeouts / Confirmations

This is a question about how a firewall, FW, keeps IP to UID associations current/up-to-date in an environment where such associations might be changing every few seconds.

A FW associates a UID with an internal IP address, e.g. 10.10.10.10, which has

...

Resolved! forcefully logout all GP users from gateways

Hi Anyone,

I'm trying to logout all GP VPN users forcefully logout from the gateway either doesn't logout users or no errors throwing on command as well

>request global-protect-gateway client-logout gateway gp-gateway reason force-logout user * compu

...

SSL Inbound Decryption and PA

Hi Everyone,

Learned something new from you today.

We are going to enable SSL decryption for Inbound traffic coming from Internet to our web servers.

Need to know when does PA intercept the traffic coming form Internet to the web server which is hosti

...

Eventid eq routed-OSPF-neighbor-down

PAN-OS - 8.1.12

Want to understand the below Massage and Why it occurs ??

>less mp-log routed.log

2020-04-15 09:28:05.296 +0400 TM_SPF: start full SPF calculation rid 172.16.80.16
2020-04-15 09:28:05.296 +0400 TM_SPF: Do the full SPF calculation rid

...

PAN GPA Service issue error - return error code = 10061.

PAN GPA is giving error , checking service on PC it reports stopped when I try to connect through agent.

Tried to uninstall and install again , did not help.

anyone faced same issue ?

T14992) 04/17/20 08:50:44:186 Debug( 692): CAC, name is DigitalMe

...

Resolved! Configuration of Security Profiles

Hello,

I have a question related to the actions that I can configure in Security Profile. Specifically, Vulnerability Protection.

What happens if I set the action as "Alert"? Will it drop the connection? Or the connection will be permitted, and it

...

Active/Passive vs. Active/Active

I am currently working on a network redesign project with all Cisco gear. Our network engineer is opting for a complete HSRP Active/Active environment. According to all deployment documentation, HA Active/Passive seems to be the preferred methed for

...