General Topics

Discussions

Sorted by:

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

How to Configure Email Alerts with Authenticated User

I have a PA-3020 with 7.0.1 installed.

is there anyway to email with Office365 email address?

I tried from command line and got the below error.

"Client was not authenticated to send anonymous mail during MAIL FROM"

Resolved! Maximum number of OSPF routes supported

what is the maximum number of OSPF routes supported on PA3020 and PA3220.

I have checked the maximum number of routes using the command show system state | match cfg.general.max-route.

Is there any specific limit for OSPF routes in the routing table ?

...

APPLICATION INCOMPLETE

Good day All

i had read all the possible solution to this issue, but still presenting the same symphtom, i have applied all solutions mentioned on all posts.

does anyone had or did something different?

thanks in advance.

kind regards.

Direct web traffic to internal proxy

For some reason oun of our MS GPO's is failign to apply ( or rather is wiping ) proxy server settings for our users.

The users shoudl be hitting the proxy before going through the PA, but it's broken.

USER-Website:80:443 --> PROXY:8080 --80:443--> -

...

Caveats for changing interface netmask?

I've got a client that wants to expand the network range on one of their interfaces for additional DHCP scope space, moving from a /24 to a /23. I wanted to check if there are any caveats to this on the PAN side? Will the update take effect as soon

...

migrating configuration from physical appliance to Azure VM

Hi community,

I´d like to check with you if there´s a way to migrate/adapt the configuration from a physical firewall to be imported into an Azure´s VM?

Could it be possible importing into the Migration tool both configuration files...

1. snapshot fro

...

URL Filtering Issue

Hello Community,

I want to block one specific https URL (without applying decryption rule) but the traffic is being allowed by the lower policy. I have applied many combinations with the wildcards but none of them works.

Can someone please help me wit

...

Asymmetric Routing and TCP Syn Check

Hello All,

I have a scenario where I will be having two ISP's (ISP-A and ISP-B) connected to the PA Firewalls via eth1/1 and eth1/2 interfaces. Both these Interfaces will be in the same untrust-zone. ISP-A will be the primary one and ISP-B the backup

...

Resolved! Vulnerability Signature action is Alert but traffic is getting reset both due to threat

In PA traffic is blocked due to threat signature.

In threat kogs it shows reset both.

When i check the signature it shows default action is alert only???

Why PA is resetting the connection when signature shows action as alert only???

NFR licenses vm-100

Hi,

How can I get and download NFR licenses for vm-100?

Global Protect and google play traffic from mobile

Hi all ,

I am running PAN OS 8.0.19 and GP 4.1.12 and users cannot access google play store while they are connected to the VPN from androids .

I have tried with spli tunneling including 63 subnets from google and I have tried full tunnel defining i

...

Resolved! SSL Exclude Option Missing in 8.1

Hi Community,

I noticed, that in 8.1.x (7,8,9, 9h4) the "SSL Exclude Option" in Device > Certificate Management > Certificates is missing.

The PAN-OS 8.1 guide mentions this option on page 198, and you can see it in a screenshot in this KB point 7:

...

Resolved! LSVPN Satellite Deny specific subnet to Publish to gateway

In LSVPN VPN setup how can we deny specific subnet to not advertise to gateway.

I have selected Publish all static and connected routes and I want to deny some of static routes of them , how can we do that ?

I know we can disable public option manual

...

Resolved! Address object was saved with invalid IP address.

Hi All,

PA-5050 PAN-OS 7.1.24

Is it expected behaviour?

Thanks,

Myky

Multicast with Chromecasts confusion

Background:

I have a trust zone on ethernet1/2 192..168.1.0/24 and an iot zone on ehternet1/4 10.10.10.0/24 and I want to be able to cast things from endpoints (mobile phones and laptops) to the chromecasts on the iot zone.

It seems like multicas

...