General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Prisma icons stencils for Lucid charts

I am searching for the basic Prisma logo icons.

I wish to reference Global Protect, Prismas remote Prisma cloud and other basic pretty icons/stencil

Thank you

License Usage AuthCode

Hi there

We are trying to track license usage as shown here: https://docs.paloaltonetworks.com/vm-series/11-0/vm-series-deployment/license-the-vm-series-firewall/vm-series-models/licensing-api/use-the-licensing-api/track-license-usage

For the cal

...

Resolved! Site to Site VPN

Quick question on setting a site to site vpn, using tunnel mode. If I have a site "A" peer going and connecting with a site "B" peer for a VPN, can both sites have the same IP address subnet, or will that conflict?

Scenario:

Site A: 192.168.20.5

...

what's the recommended way to block ransomware in a firewall policy?

Hello,

I am new to palo alto .

what's the recommended way to block ransomware in a firewall policy?

GlobalProtect Android version 13 issue

Global Protect login continues to fail on Version 13 Android.

It seems to have been caused by Android security enhancement issues.

created it with SHA 384 but I can't log in.

"The network connection is unreachable or the portal is unresponsive,

...

EST Enrollment over Secure Transport

I use certificate based IPSec VPN Tunnels that rely on Certificates. The Certificate Authority i use supports EST to allow for automated enrollment similar to SCEP. Is there a way to configure Pan-OS to work with EST instead of SCEP? I have not be

...

Resolved! Regarding Security Advisory CVE-2024-3393

Hello Team,

I have recently upgraded my pa-1410 firewall to panos ver. 11.1.4-h7, because its preferred version so far.

Today I have received this advisory link ...

https://securityadvisories.paloaltonetworks.com/CVE-2024-3393

I have DNS Security

...

Resolved! Failure to install Apps and Threats

Model PA-3050
Software Version 9.1.16
GlobalProtect Agent 6.1.0
Application Version 8692-7955 (03/30/23)
Threat Version 8692-7955 (03/30/23)
Antivirus Version 4401-4918 (03/26/23)
WildFire Version 757322-760771 (04/06/23)
URL Filtering Version 20230406.2015

...

Resolved! Multiple authentication profiles for GP portal and gateway?

Hi,

I am using LDAP authentication profile for GP Portal and Gateway authentication. The problem is when the LDAP server is down I can not log in. So I want to use two authentication profiles. One for LDAP backend and one for local authentication. As

...

about transparent

sorry for bothering you all. I'm new to computer networking. And while I'm building my own system, I'm having some trouble.

MODEM (internet) --- Firewall Palo Alto --- Laptop. This is the model I'm building myself. I was going to use transparent mode

...

Resolved! Are there signature release for following vulnerabilities?

Hello
I'm Tomoyuki Nakamura.

Are there any plans to release signature for the vulnerabilities below?.
These were not listed in THREAT VAULT or Security Advisory.

CVE-2024-50379
CVE-2023-34990
CVE-2024-48889
CVE-2024-12727
CVE-2024-12728
CVE-2024-12729

B

...

Palo Alto Global Protect

Hello.

I am looking to setup and use Palo Alto's Global Protect feature; The question I have is if I have only 1 egress port (WAN) port that is public-facing, can I setup my Global Protect on that egress port or do I need to use another port for

...

For those that seek to get SSH Proxy working

Searching the internet it seems that people are looking to enable SSH Proxy and not finding answers. I managed to get it working but must say that the current supported SSH decrytion parameters for all PAN-OS versions aren't the most secure ones so y

...