If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users.
In the past six
...
Hi All,
Device Type: PA-220
Software Version: 8.0.11-h1
Im having an issue with old traffic logs not showing up on the monitoring tab. I can see live logs but if I want to check the logs for the previous day or previous 2 days then nothing shows up. I
...
We are having issues with students playing google pacman and Atari Breakout on google images .
Has anyone got any suggestions on how to block these ?
Hi Expert ,
Can it be possible to use feature wildfire and decryption office 365 it can be ? or have a limitation?
Please suggest to me
Hello,
When trying to fetch an EDL from a web server configured without support for TLSv1 (only support TLSv1.1 or 1.2) the result is "Server error : URL access error".
I don't know if PAN-OS 7.1.18 fetch client for EDL only support TLSv1. Checking c
...
Hey there, I'm designing windows 10 app which needs to connect to a office based database via a remote laptop.
The laptop will have access to the office through the GlobalProtect VPN.
I need a way to query the GlobalProtect windows agent to see if ther
...
I have a standard L3 VPN setup where I have VR on each side acting as the CE (customer edge) device. CE-PE protocol is BGP on both sides. So, essentially, i have an eBGP peering in which I have to receive prefixes from the distant end, which of co
...
Hi Everyone,
Asymmetric Routing and TCP syn verification is a common issue and there were many articles on how to resolve that, basically
1 - To change routing itself and make sure there are no asymmetric routing in the network - best from PA point of
...
We are using Kafka for messaging and have a requirement to inspect the SSL message sent to kafka broker from kafka connect. Kafka using binary tcp protocol with kafka broker listeners on PLAINTEXT://9093 (without SSL)
Can paloalto decrypt and inspec
...
Hey!
My firewall is a PA-3020 with 8.0.7. There is a Global Protect gateway and portal, users can connect via Global Protect.
As portal address in the global protect app, we are using an address that is availabe in public dns.
Additionally, there is a p
...
Hello Folks,
I am looking for some more information on session id command outputs. I see a session in free state with
application db = 0 and app.id c2s node (0, 0) s2s node (0, 0) . What does this mean ?
Is this that app-id engine of PAN is not
...
Can you have 7.1 and 8.x firewalls in the same device group? Any issues with commits.?
Can you use a domain EDL for other purposes or only for DNS sinkholing?
In other words, can you use a domain EDL in any policy rule in the same way an FQDN object can be used?
I would expect that you can, but wanted to ask.
On my PA-500 and PA-820's when I have a IKEV2 tunnel I tend to see this alot. Both of these are running 8.0.10
'IKEv2 SA negotiation is failed. received notify type TS_UNACCEPTABLE
Trying to figure out what is causing this. Anyone have any ideas
on:
no valid content package exists
on:
Issue with network driver of PAN-OS 10.1.3 deployed in azure
on:
SNMP OID for identifying if an power supply had failed or removed from the firewall
on:
Question about NAT
