General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

ha_nat_policy_mismatch counter

Hi Everyone, What exactly does the below counter indicate and what would trigger it? ha_nat_policy_mismatchI have added L3 interfaces to an existing A/A HA cluster that uses vwire interfaces in an asymmetrical traffic environment. The traffic on those vwire interfaces are being handled correctly by the A/A. The new L3 interfaces are setup in a s...

GP Gateway Adding additional IP Address range

I need to increase the GP IP range. Is this as simple as adding an additional pool?

Bulk update of objects

I have a requirement to update the 100s of /32 address objects which do not have a CIDR. Does anyone know of a script or other means to do a bulk update of the addresses to append CIDR?

Resolved! i2c bootup errors (PA200)

A friend of mine found a PA200 at a thrift store for $5.00 (without a power supply) I plugged it in today to see what state it was in and it looks like it had a rough life... All the guts are still inside and everything is clean and connected however it won't even get to the initial bootup MAINT prompt, anyone seen this before? Sometimes I get ...

Global Protect won't connect to Iphone MAC

Hello All, We have Global Protect License for mobile we upgraded recently to 5.0.8 and i see my iphones will not connect.did any one face this issue ? Works fine with windows and desktops only with iphone i face the similar issue.Any help will be much appreciated.

Different deployment mode in different VSTS

Hi All, I would like to know whether it is possible to use different deployment mode (L3 or L2) for 2 VSYS of a same physical paloalto firewall box. We have 5620 and 5680 model. Thanks and regards Chandrajit

PA220 with all security features and SSL decryption forward proxy enabled

Hi, According to the PA220 data sheet, firewall throughput is 500/580 Mbps, With Threat prevention throughput 240/280 Mbps. What about in additional with SSL forward proxy ? What is the tested throughput in 9.1.x ? Thanks, E

Why SSL Certificate Is Required In The Gateway When Tunnel Mode Is In IPSEC

Hi Team, Wants to understand why ssl certficate is required in the gateway when tunnel mode is in IPSEC. Can anyone please provide the in depth connectivity process and justification for the need of SSL certificate on each gateway. -Regards,Sethupathi M

Resolved! Zone Protection on GlobalProtect Zone

Dear Team, I have a question do you recommend putting Zone protection on the Zone which I have for GP. I am using loopback External IP for the connection and in the GP Zone I have added the tunnel interface. Just want to understand if best practice to put zone protection on this zone? Thanks

Resolved! VM-100 Deployment on ESXi

Hey, so I've been working with PaloAlto technology for a couple of months now. I'm trying to set a lab environment to continue practicing for my PCNSE. However I am having some trouble figuring out the setup (specifically when it comes to the VMWare configuration). I'm working on vSphere using ESXi. I have a virtual Ubuntu Host and a VM-100 depl...

Panorama Mode - No default collector

Hey folks-Ive got an HA pair of Pano's in AWS that I needed to do some local logging to due to some missing features in Cortex. Added the disks....changed the mode and poof! NothingIm not seeing a default logging collector or collector group as the documentation indicates I should have. When I try to manually create the collectors there are no d...

Configure Palo Alto GlobalProtect VPN (PA-3050) with Azure MFA Cloud

* We have Azure AD Connect sync On-Premise Active Directory with Azure AD* We have valid Azure AD Premium license We would like to know whether we can configure MFA for our VPN. If so which one we need to chooseAzure MFA server or Azure MFA cloud? Please give me the highlevel steps to accomplish our requirement

Resolved! Different version

I have version 8 on a PA 3220 and on the secondary device ( hot stand by ) we have version 9, there is some problem in that they work with different versions

Messed up IPv4 ranges in output

We are on MineMeld version 0.9.52. We had an incident with MineMeld on the 4th of March that caused a major outage for many of our users. We have four miners feeding in IP addresses for our block list (let's call them bl-1, bl-2, bl-3 and wl-1). The first is for addresses we want to block, the next two use external threat feeds (one of them is...

Basic Routing on PA-220

I have a new PA-220 for a test lab, and this is my first time configuring any PA device from scratch, so I apologize in advance if I've missed something basic. I have set up the interfaces and I can ping out using the troubleshooting -> ping utility in the web UI, but ONLY if I specify the outside interface IP as the source during the test. ...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

ha_nat_policy_mismatch counter

GP Gateway Adding additional IP Address range