General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Commit not needed for operational mode

Need to verify when on operational mode

PA>

No commit is needed right?

IT was save the config automatically

Resolved! Panorama Device Static Routes

Hi,

I have a a requirement to configure alternative static routes on a Panorma instance other than the default route. Essentially the network my instance is deployed in is dual homed and needs to have routes for certain networks pointing a different

...

Total Objects and Device Groups

Hello! I want to start this off for apologizing if i do anything wrong here or miss any processes as this is my first post.

I had the question for the community to see if anyone has ever ran into something like this, or what my best course of action

...

Resolved! how to unblock this sub-url?

I have a URL filtering list with *.github.com in custom blocklist. but I want to allow one specific sub-url https://github.com/abc .

added the sub-url to the custome allow list but didn't work. I'm assuming because of the url filtering order of prefer

...

Resolved! How is Global Protect SAAS licensed?

Hi;

In addition to having to have a licensed Panorama appliance, do you need to have a per user or per device license?

Kindly

Wasfi

change standalone node to HA

I have Standalone PA 3020 up and running , is being manged by Panorama and now I need to add another PA 3020 to bring in High Availability.

Please help me with the steps that I should follow.

In Panorama We have template stack and Device group for alr

...

GTP & SCTP Protection

Can someone in this forum tell me about GTP & SCTP Protection features? Is there any deployment reference for GTP & SCTP feature?Can we only inspect GTP-C (Control Plane) only?

Resolved! Polling Error with Miner

Hello I was wondering, I was trying to fix one of my miners that the URL seems non-existant. The URL is from Palo Alto : https://minemeld-updates.panw.io/deprecated-feed.txt

I was wondering if any of you found the new URL to which it could be moved, I

...

Client Authentication Sequence only works for 1st item in the list

I configured Client Authentication Sequence for both GlobalProtect Portal and Gateway for both LDAP and local database. For some reason, only the first item in the list works. It does not seem to try the rest of the sequences in the list. If LDAP i

...

How to migrate config from expedition tools deploy to panorama

Hi Expert,

Please suggest to me about how to deploy config from Expedition Tool (Migrate config old firewall other vendors such as juniper )to panorama in the case doesn't config on the local firewall of multiple firewalls per sites.

Thank you

Minemeld Installation OVA + ISO : LiveCD or removable?

Hi everyone,

I want to install Minemeld following the official tutorial [1] that uses an Ubuntu OVA + MineMeld ISO that installs the software during the first boot. My question is if that ISO can be removed after first boot and the consecuent install

...

Azure Datacenter IP Dynamic List Issues

Hi all,

We have the azure_cloudIPS miner, processor and outpur working and can view the list of IPs via the link (https://minemeld.mycomp.com/feeds/AZ_DC_IPS). We have simplar feeds setup of Office365. However, the on teh PaloAlto, the dynamic l

...

Advise on using AD user-id in local PA groups?

I am struggling with utilizing ActiveDirectory groups in firewall policy. My concern is then our AD administrators have control over transversing our firewall policy. Generally speaking say for example we have a FW policy setup where AD group ServerA

...

Resolved! How often does the Integrated User Agent query the Domain controller for security logon events?

Hi;

How often does the Integrated User Agent query the Domain controller for security logon events? Is this period the same if you run the agent on a separate host?

Can you change this time.

Kindly

Wasfi

Resolved! New GP deployment - DNS, ping, and tracert work, but no app traffic

I've set up a new GP config on a new PA-820 firewall. I have an old firewall I'm replacing, but I'm running them side by side. On the new 820 GP, I can connect with a GP client, and then ping internal servers. I can verify that DNS is working with ns

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource