General Topics

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

🚀 Join us at Palo Alto Networks Headquarters for Ignite - November 14, 2024 🚀

Enterprises are embracing AI to revolutionize their operations, but with innovation comes new cybersecurity challenges. That’s why you can’t miss Ignite on Tour!

This event is your gateway to exploring how AI is transforming cyber defenses. Join us

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Multiple copies of Content Update e-mail since 8145

Before I open a support ticket about this, I wanted to check if it was only happening to me or if others have been experiencing the same thing.

Up until April 17, 2019 I would only receive a single copy of the daily "Palo Alto Networks Content Update

...

Resolved! PA 5050 Power supply failed and how to see env logs?

On PA5050 we have One of power uspply failed.

I have opened RMA with PA.

I was using this command to see env logs

less mp-log ehmon.log

*
* Ehmon (v3.0)
*
2018-07-01 01:43:57.677 -0600 Start time.
2018-07-01 01:43:59.679 -0600 Loa

...

DNS Proxy Configuration with VPN

Hi,

I'm trying to route to some internal domain controllers for domain local DNS, and public DNS servers for everything else. This seems reasonably straight-forward except that when I specify the internal network IPs of the Domain DNS servers, they t

...

Server Response Inspection for HTTPS/VPN/Encrypted Protocols

Hello,

we are experiencing slow/failed downloads and slow/failed file transfers over protocols like HTTPS, SSL, VPN.

like to hear some opinion regarding "Disable Server Response Inspection", does PAN actually inspect encrypted sessions even though th

...

Resolved! high management CPU

Good day community.

We are using PAN 820 and the management CPU isn't stable for the last 3-4 days.

It's going from 10-15% to 70-100% and stays like this for some time and this happen several times a day.

So, the GUI interface is freezing and also I not

...

QoS Methods, Design & Configuration

I have a site that only has 5 megs of upload speed and its constantly getting fully utilized. I know I should probably get more bandwidth from the ISP but thats simply not an option right now. Anyway here is my goal. I would like to make the firew

...

Resolved! Deal Reg area single sign on error

Hello,

so i've been trying to access the deal reg area on the "NextWave Partner Portal".

The problem is that i'm always greeted by the following error:

Is there some mailing address for these kinds of errors or generally speaking can i do something to

...

Bildschirmfoto 2019-05-01 um 17.40.28.png

aggressive-cleaning enable but still got disk usage email alert?

i have configured the command below but still got email alert

model: PA-5050
sw-version: 8.0.9

-NGFW-1(active)> show system state | match aggressive-cleaning

cfg.debug-sw-du.config: { 'aggressive-cleaning': True, }

domain: 1
receive_time: 2019/04/

...

Resolved! IPSEC GUI shows green for both phase 1 and 2 - Need to restart the ipsec to ping across the ipsec

Gui shows both phase 1 and 2 up.

Can not ping lan IP at vendor end.

when i ping vendor lan ip

i see below

( description contains 'IKE phase-2 negotiation failed when processing proxy ID. cannot find matching phase-2 tunnel for received proxy ID. rec

...

Resolved! Route Monitoring. Possible FR?

Hi

I ran into an interesting requirement which (I believe) is not possible with the current path monitoring features for static routes. Here is my scenario...

First lets just remove dynamic routing from the equation. For this specific use case dyanam

...

4D83FE9B-261E-45EA-9969-1C48BD460C9F 4.png

4D83FE9B-261E-45EA-9969-1C48BD460C9F 6.png

Require authentication via global protect when connecting to data center resources

In an attempt to secure connections to production resources. I would like to implement a policy that if you are for instance using SSMS to connect from one location to a database in the data center, that you first have to authenticate via global prot

...

Resolved! IPSEC VPN from PA to Multiple devices - Using same crypto profiles?

We have PA running IPSEC to different remote sites.

Each site has different Public and Private network

For each site i need to create tunnel interface and do the same config over and over.

Say if i need ipsec to 15 sites then for each site

i need to

...

Certificate based authentication for IOS microsoft intune intergration

HI @gwesson

I have an issue in client based authentication for IOS devices. I have imported the client certificate in windows and android it works same cert installed in iphone it shows an error client certificate not found.

Recently, I have see b

...

Resolved! LDAP authentication failover

Hi Community,

I have 2 Domain controllers serving user information. I have configured these 2 under same LDAP server profile. I am using this profile in authentication profile for GP.
I configured 4s each for search and bind timeout under LDAP server p...

Resolved! Multiple vpns to the same peer

Hi,

We have a requirement where-in we need to configure 2 vpn tunnels to the same remote peer.

Also the remote end local ip address ranges are the same. Below is a quick explanation

Tunnel 1

MyPeerPublicIp = 1.1.1.1

RemotePeerPublicIp = 2.2.2.2

MylocalSu

...