General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by Community Team Member
  • 4130 Views
  • 0 replies
  • 0 Likes

PA 445 ZTP

Hi Team, I am planning to configure the new firewall using ZTP and also planning to manage this firewall completely via SCM. Add a ZTP Firewall to Strata Cloud Manager Following the above link to add teh ZTP FW to SCM. > Need to know where will i get the Claim Key? Here it asks for both Serial No and Claim Key. > If i activate the licenses...

Resolved! Is it possible to generate "email" alert when any user reaches the defined bandwidth threshold?

Hi All,Is it possible to generate "email" alert when any user reaches the defined bandwidth threshold?Eg: Defined bandwidth threshold is 1 MB, if any user reach or exceeds the defined bandwidth threshold then the device should trigger a email alert to administrator. Note : I don't want to restrict any user to 1MB, but need onle alert if he excee...

Gururaj by L4 Transporter
  • 3882 Views
  • 2 replies
  • 0 Likes

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?I have 8 anti-spyware profiles across about 10 HA Pairs - 2 predefined and 6 custom. All in "Shared", not a DG. Any references that would be able to be in a template are likely in a template.It seems to me that until I can get my departments to give me upgrade windows I should s...

Traffic on udp/3478 (STUN) is been classified as 'unknown-udp' for MS-Teams app

Hello, Most of our users are running Teams in a Office 365 on Windows laptops, from a network perspective it is just a connection on different ports to random hosts within 52.0.0.0/8 subnet. The problem we have is with udp/3478 port, some portion of it is STUN, some been identified as MS-TEAMS-AUDIO-VIDEO with latest app-ids. As mentioned i...

Resolved! Websites stopped working after update

Hello, We have updated 10.2.6-h3 to 10.2.8-h3 earlier and recently to 10.2.10-h9 but in both times we had to do rollback to 10.2.6-h3 because our websites stopped working. Everything else seemed to work except inbound traffic to these applications. Traffic totally stopped. Not even one hit in traffic log after update. Have you seen anything ...

ToniE by L2 Linker
  • 1759 Views
  • 3 replies
  • 0 Likes

PA equivalent of ASA packet tracer?

One of the more useful features in troubleshooting on the PIX/ASA (which we used until recently) is the packet tracer, which allows us to enter source/destination IP/port, etc and check to see if a given connection is allowed or blocked, and by which rule. Is there an equivalent feature in the PA units?

HA-Palo Alto with 2-Diffrent ISP

Dear Community i have 2-PA configured as HA and need to be redundant for ISP,so i have interface from ISP-A and another one from ISP-B, and from internal service i have VM server that needs only one IP statically work with NAT and 2-Vsys,and using static route for routing, my question is how I can make some change so I can make redundant for th...

CVE in the “Vulnerability protection” profiles

Hi We have a doubt about the inclusion of CVEs in the “Vulnerability Protection” profiles. Currently [CVE-2025-0282][CVE-2025-0283] are not included in the list of signatures. Is it possible to request Palo Alto to include them and is there a procedure? Regards

Alpalo by L4 Transporter
  • 1044 Views
  • 1 replies
  • 0 Likes

Panorama Error: Number of address group(x) exceeds platform capacity(x)

Hi All, We onboarded the 1 pair of Palo Alto firewalls into panorama. It is successfully onboard. New Template stack pushed successfully to firewall. But the device group was failed with “Error: Number of address group(x) exceeds platform capacity(xx)”. Based on Palo Alto solution is to disable "Share Unused Address and Service Objects with De...

Resolved! FTP Transfer BIOC

Hello Palo Alto LiveCommunity, I’m currently working on a task where I need to create a custom BIOC (Behavioral Indicator of Compromise) and add it to a restriction profile to block FTP command lines. Specifically, I want to prevent FTP-related commands from being executed by monitoring and restricting certain patterns. I also need help with...

Can't find PAN-OS for VM

Hello, In my customer support portal, I can't find the VM version for PAN-OS. Is this related to my license, or did Palo Alto remove it? Thank you! Best regards,Murillo Castiho

murilocastillo_0-1736866502498.png
  • 24337 Posts
  • 124 Subscriptions
Labels