General Topics

Join Us in Welcoming LIVEcommunity's 2024-25 Cyber Elite Experts!

LIVEcommunity is pleased to announce the 2024-25 Cyber Elite Program!

LIVEcommunity's Cyber Elite Program recognizes community experts who demonstrate excellence in participation and contributions to other members and Palo Alto Networks customers

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Active PA license expiring soon

We have PA in active passive mode.

Seems Active PA license is expiring soon.

Due to our internal process we can not get license in time.

If active PA license is expired will it work normally in Active passive mode?

Resolved! Link or Path monitoring function

If I have not enabled any type of HA, can I still enable Link or path monitoring to trigger a firewall (not in HA) to go in suspend or non functional state ?

Unable to Launch Global Protect from Start Menu after upgrade to ver 4.1

After I upgraded my Global Protect Client to version 4.1 i was unable to launch Global Protect from the start menu, but had to launch Global Protect using the system tray icon. Has anyone else experienced this issue or have a resolution.

Resolved! LDAP auth for the WEB UI access clarification

Hi All,

Why do we need step 3 mentioned in the KB below for the WB UI authentication with LDAP?:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGuCAK

Why do we need to create a local user? Won't Palo be an LDAP proxy (gra

...

False Positive (virus/win32.wgeneric.vnujo)

Dear Support,

Our customers have been reporting that palo alto is identifying our software as malware.

application ms-ds-smbv3
virus/win32.wgeneric.vnujo
ID 219797367

How can we proceed to whitelist our software permanently?

Thank you

Resolved! How do you deal with Service Route and MGT port redundancy?

We had an outage that took out a switch, and the PA management port is connected to that switch. I was unable to access the UI or CLI, and VPN was unable to authenticate via LDAP. I found the issue was that all the Service Routes were set to default

...

How to resolve invalid NAT rules in Expedition

I've downloaded and run the latest Expedition VM, and have imported my Cisco ASA config file, but Expedition says all my NAT rules are invalid. Not clear what that means, and the instructions (link below) say nothing about how to resolve them.

https

...

Seeking Guidance on What Content Should Be Included In a Panorama Maintenance Guide

Tasked with creating a "Panorama Maintenance Guide," but finding little detail regarding what should be included. I have search for something similar from Panorama, but I have been unable to locate anything.There are a few functions I want to include

...

Resolved! Checking for CloudWatch

Hi all,

Relatively new with Prisma and playing with the RQL. Would anyone be able to tell me if there's a query i can run that tells me if cloudwatch is enabled within an AWS environment?

Report wise, I tried running something against CIS compliance

...

Resolved! HIP logs review

Hi,

Need your insight !!

We have few VPN portals to meet HIP checks ( laptop - Domain and anti virus )

I could see the HIP logs in the HIP Match ( that means host passed the HIP match ?)

Or those logs that shows HIP match passed or failed ?

Any keyword

...

GlobalProtect reports Machine Certificate (null) but it isn't...

Hey all,

Recently upgraded to PAN-OS v9.0.3 and GlobalProtect is no longer working for some. Error messages in the system logs are showing GlobalProtect portal client configuration failed... Machine Certificate CN: (null) for those that fail but als

...

Resolved! Panorama Error

Getting below error in Panoram's system logs :

Panorama has lost connection to its peer, no log will be forwarded

Though from Panorama all devices looks connected .Verifed the device status from panorma.

Anyone facing similar issue ?

TCP issues when moving an application through a Palo Alto FW

Hi,

Following scenario:

we have a 2-level Firewall Filtering / Security Setup active in our infrastructure, with a Cisco ASA currently acting as the Internet Firewall (updated to the latest Cisco ASA OS version) and an internal Firewall (Checkpoint a

...

NAT PPTP VPN

Hello, im trying to set up a NAT rule for a PPTP VPN tunnel.

I have set it up like this:

Source: untrust

Dest. zone: untrust

Source address: Any

Dest. address: lets say 20.20.20.20/32

Service: any

Source Translation: None

Dest-Translation:20.20.20.20/32

Secu

...

TLS 1.3 support

Hi everybody,

any news regarding change of decryption from passive to proxy mode to support TLS 1.3 decryption?

Thank you,

Jan

Discussions