General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Minimum allowed version of Global Protect

1st/ Can we check with HIP what version of GP they are using to connect.

2nd/ Can we force users/clients to be above a minimum version to be able to connect.

Resolved! Does Pre-logon for Global Protect use the Computer certificate as a client certificate?

Hi;

Prelogon Global Protect connection, does it use the Computer certificate as opposed to the user certificate to establish the tunnel? It seems that the only way to do it.

Kindly

Wasfi

Resolved! Global Protect User cant login to the portal

User can login to GlobalProtect Portal normally. However, clicking a link to download the GlobalProtect client fails with the following error: "Could not find file".

Note: Global Protect agent has already installed and activated on peers

Problem with Panorama commit

Hello there!

I have a problem when I try to push the commit to Panorama. This commit is added to the queue, but then nothing else happens. The odd thing is that nothing is queued in the firewall queue...

Thanks in advance.

Resolved! URL Filtering - How does it work exactly with Service interaction

So let me start here fundementally all I'm trying to do is something like "Computer Y can access MS updates and nothing else" and my three pointers were:

https://live.paloaltonetworks.com/t5/General-Topics/Security-Policy-with-Service-URL-category-co

...

VPN-NAT question

I have 10.240.0.0/12 in the Proxy ID and would like to NAT all my 192.168.x.x addresses behind 10.248.250.10 out of that 10.240/12.
my plan is to create the NAT rule and assign that 10.248.250.10 to the VPN tunnel Interface. will this create a route

...

Troubleshooting User-ID from syslog listener

I've configured my 5050's to be Syslog Listeners for a couple sources so that I can parse User-ID information out of them. I did so following this document here. I can see via the command

show user server-monitor state XXX

that I am receiving log me

...

Resolved! Commit not needed for operational mode

Need to verify when on operational mode

PA>

No commit is needed right?

IT was save the config automatically

Resolved! Panorama Device Static Routes

Hi,

I have a a requirement to configure alternative static routes on a Panorma instance other than the default route. Essentially the network my instance is deployed in is dual homed and needs to have routes for certain networks pointing a different

...

Total Objects and Device Groups

Hello! I want to start this off for apologizing if i do anything wrong here or miss any processes as this is my first post.

I had the question for the community to see if anyone has ever ran into something like this, or what my best course of action

...

Resolved! how to unblock this sub-url?

I have a URL filtering list with *.github.com in custom blocklist. but I want to allow one specific sub-url https://github.com/abc .

added the sub-url to the custome allow list but didn't work. I'm assuming because of the url filtering order of prefer

...

Resolved! How is Global Protect SAAS licensed?

Hi;

In addition to having to have a licensed Panorama appliance, do you need to have a per user or per device license?

Kindly

Wasfi

change standalone node to HA

I have Standalone PA 3020 up and running , is being manged by Panorama and now I need to add another PA 3020 to bring in High Availability.

Please help me with the steps that I should follow.

In Panorama We have template stack and Device group for alr

...

GTP & SCTP Protection

Can someone in this forum tell me about GTP & SCTP Protection features? Is there any deployment reference for GTP & SCTP feature?Can we only inspect GTP-C (Control Plane) only?

Resolved! Polling Error with Miner

Hello I was wondering, I was trying to fix one of my miners that the URL seems non-existant. The URL is from Palo Alto : https://minemeld-updates.panw.io/deprecated-feed.txt

I was wondering if any of you found the new URL to which it could be moved, I

...

Discussions