General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! PA-500 VPN with Amazon VPC

Hello,

have someone a howto about connecting a PA-500 with the Amazon VPC Service?

It would be nice to take a look on it

best regards

Dietmar Otto

PA session end reason is decrypt error -

In PA i saw this behavior for session end reason is decrypt error and traffic is working fine.
I check with users where session end reason is decrypt error they told me they have no issues.
we have ssl decryption enabled and PA is running 8.1.9
IS th

...

Resolved! PA-850 & Radius PEAP

We had purchased a pair of 850s to replace a pair of 3020s. Over the weekend I had put the 850s into place and we immediately saw problems with clients authenticating to our radius server behind the 850. We're working with PA support but they seem

...

VPN S2S and Description ssl in Wires mode

Hello, I have a couple of doubts and I would like you to help me about it. 1.- Is it possible to perform an Ipsec VPN when the firewall is in V-Wires mode? Only having an IP in the administration interface? 2.- Is it possible to perform SSL decryp...

Resolved! DSRI for VPN Tunnel

I can't seem to find a clear answer to this, and there may not be one. I have a VPN tunnel between 2 sites, both on PA-820's. Would "disable server response inspection" on the VPN policy on both sides benefit from this? What are the potential downsid

...

Updates palo alto network website and ssl decryption

I am going to implement ssl decryption for some subnets

where we have management subnet of Palo Alto networks.

Need to know if PA website updates.paloaltonetworks.com works when SSL decryption is enabled?

Do I need to check - verify server identity for

...

GlobalProtect Dialog Empty

This started after adding a second VPN to GlobalProtect, but not immediately, perhaps a day or 2 after. Using Windows 7 and GlobalProtect 4.1.8. When I click the GlobalProtect icon in the System Tray, It shows up in the TaskBar, but no window shows.

...

Internet disconnection when switching from wired to wireless

We have newly implemented PaloAlto in our network. Internet access provided for the user using the AD username. Using User-ID Agent in Active directory. When a user is logged in with wired connection and switched to wireless the internet is getting d

...

session end reason: auth-policy-redirect

Hello,

I don't find this session end reason in documentation, someone know what does it means? thank you in advance

Regards

Marivi

Resolved! Palo Alto Partner Evaluation Licenses

Hi Guys,

I have a Palo Alto partner account and I need to do some testing on a VM before testing it on customer device therefore where can I get a free eval license?

I have registered customer devices in assets and they are already in production. Can

...

Monitor spoofed IPs

Is there a way to view in monitor spoofed IPs?

Resolved! Can a UDP session be this long?

FW (active)> show session id 2394622

Session         2394622

        c2s flow:
                source:      10.101.6.34 [INTERNAL2]
                dst:         172.20.0.89
                proto:       17
                sport:       52125

...

TAC Recommended PAN-OS Release 9.0

Hi Guys,

We are running 8.1.6 on our PA Gateway and Panorama and would like to upgrade it to 9.x.x. I went through the Release Guidance and it says the preferred released version is 9.0.4

https://live.paloaltonetworks.com/t5/Customer-Resources/Suppor

...

Resolved! PAN-118553

Hello -

We had a major outage over the weekend and the tech said it may be related to this bug. However, I can't find anything about it and he didn't provide a link. Can someone help me find it?

DNS Proxy for Specific Vsys to resolve FQDN Object

Can I create a DNS-proxy for a specific proxy to resolve FQDN created in object>address.

I create a DNS-proxy with the DNS profile but it didn't work, the firewall use always the DNS configured in Device>Service>Globale

Discussions