General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Error reading last checkpoint

Hi guys

I started experiencing this problem in MM 0.9.52, my MM engine was restarting continuously. I tought it was some bug related with this version so, with a little bit of stress, I updated to 0.9.60 (I'm using CentOs), but I still get the same b

...

Screenshot_2019-04-23 Problems with CentOs 7 and MM 0 9 52.png

Resolved! Best practice for OSPF

So i have a Pa850, it has lots of vlans off it.

1 vlan connect to the other OSPF routers. I have OSPF on there. But what about the other interface - is it better to add them as passive OSPF or redistribute connected ?

palo alto website outages

Hi all,

Look, I don't want to tell the good people at Palo Alto how to do their jobs, but it would be great if they could push https://knowledgebase.paloaltonetworks.com/ back online. I've been on hold for over an hour for basic information available

...

minemend service fails to start

I get the following error. Please help!

:~# systemctl status minemeld.service
● minemeld.service - Process Monitoring and Control Daemon
Loaded: loaded (/lib/systemd/system/minemeld.service; enabled; vendor preset: enabled)
Active: failed (Result:

...

EDL Notifications

Is it possible to create notifications when an EDL is refreshed? My security team would like to know so when they recieve the actual IP lists and URL lists that the PAN is getting updated at the same time. Thank you.

Resolved! Threat Vault and Virus/Win32.WGeneric.aalbaq

Hi all,

Curious if anyone can point me toward amplifying info regarding Threat Vault signatures? From what I can tell, these generic signatures usually tend to generate false positives. It's hard to investigate why the alert is getting triggered when

...

Policy to access apple-istore

Hi All,

I created a new policy to access apple-appstore for couple for users for testing purpose.

Zone - trust to untrut zone

address - any

user - user group name

application - apple-appstore

service - application- default

action - allow

Looks like the

...

Resolved! Problems with CentOs 7 and MM 0.9.52

Hi guys,

I used to run standalone MM 0.9.50 with CentOS 7, perfectly. Last week I updated MM to 0.9.52 with the help of @lmori and the proccess was completed with success. See ( https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Updating-Mine

...

Advanced objet search in the policies panel

Hello,

One of our customers moved from Checkpoint to PA and he's complaining about advanced search in the security rulebase.

For example, he would like to search for and IP (source) with is used in an Address object or in an Address Group Object and w

...

Resolved! I can't open support cases

When I try to follow the article about support cases I get stuck on step 2 / 3

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNSCA0

I can see one of my firewalls and his serial, but I can't click on it.

How can I solve it?

I

...

Problem with GlobalProtect

Hello all!

I have a problem with GlobalProtect. It happens that if GlobalProtect is connected to the gateway and the carrier connecton of the client goes down (3G, wi-fi, etc.) the GlobalProtect itself does not advice of the disconnection and it does ...

Resolved! Does Panorama send info to PA to send logs to which Log collector??

We have Panorama M100 and 2 M500 for logs.

Under PAnorama GUI -- log collectors i have configured which PA will send logs to which log collector.

Firewall does not have this info.

Need to know how does Firewall know which log collector it needs to se

...

PA3250 cant ping external interface public ip from internal ip but can ping any other ip

Hi there,

I can ping any other ip even though internet is working fine but when i tried to ping External public interface ip from internal its not rechable.

there is a internal to internet policy allowing ping and any other application.

Thanks

SCOM port 1270 detected as SSL application

Hi,

While I checking on my firewall, I found that SCOM port 1270 detected under SSL application.

Can someone help me with this? Is there anything that I am missing or Is it issue from Palo Alto?

Thanks in advance.

EDL Refresh fails but certificate is valid

I've got our wildcard certificate on our minemeld server, which shows up perfectly fine when i go to the web UI through Opera to manage the server. But, when I try to use the minemeld feeds in EDLs on my 5220s, I get an error that says certificate v

...

Discussions