General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

is Cluster possible?

Hi all,

is quick question on above statement. is it possible to configure clusters with Palo Alto?

I do not mean Active/Standby or Active/Active

I was not able to find any documentation on this. if this is possible, could someone point me in this dire

...

New Comer

Hi Im new to working with Palo Alto, and I im process of configuring a new Pa-820, I wanted a lttle infomation and help.

1) Do you have to create a return rule if you want the return traffic back from the destination back to your source address. Or

...

Pricing and Licensing of Firewall Products for On-Premises and Azure Cloud

We want to use the Palo Alto security firewalls so that we can enable IPS/IDS on the domain resources.

Please guide us about pricing and licensing of Endpoint Protection and Firewall Licensing.

Do we have to pay extra per entry point and also how the

...

Cannot add SNMP

Hi,

I am trying to add Palo Alto firewalls to our monitoring system but one of our PA-220 is failing to be added.

We use Panorama and PAN-OS 8.1.3.

Any idea how to fix this issue?

EDL HTTP response code said error

Hi,

I am facing an issue where the External Dynamic List shows an error when tested by cli command "request system External-list show", the error is "HTTP response code said error", but whem the list is tested from any other device it is accessable a

...

Resolved! FTP_Passive_Antivirus_Profile_Performance

Hi Guys,

quickDescription => paloAlto networks physical firewall and antivirus profile for FTP.

Task => Using a script to get/put a file (few hundred kilobytes) from/to the FTP server every 100ms (ten times per second or 20 times per second) . The FTP

...

Resolved! phase 1 up phase 2 down

( description contains 'IKE phase-1 negotiation is failed. Peer\'s ID payload 10.175.150.0 (type ipaddr) does not match a configured IKE gateway.' )

and ( description contains 'IKE phase-1 negotiation is failed as responder, main mode. Failed SA: 19

...

ALB Health Checks -> Palo Alto -> ALB

Trying to get the Palo Altos to register as healthy. Can anyone provide some assistance on NAT policies, or configurations for getting TCP 80 checks from ALB to Palo Altos to ALB which sits in front of two App servers?

ALB (Palo Altos)

|

Palo Altos

...

Resolved! IpSec VPN between Palo and Vyatta

Hi all,

I try to configure an IPSec tunnel between PA-500 (version 7.1.4) and vyatta.

Config seem to be ok, phase 1 is ok but nego for phase 2 is block in "No Proposal chosen". I select in phase 2 all possibility given by the palo.

Any body already su

...

Resolved! Custom URL Filter - Site Definition Format

We started using Custom URL Categories, and it seems when we define a site, we have to add both a wild card to cover any subdomain, and a / to cover all URI/URL of the domain, IE:

*.acme.corp (To cover subdomains)

acme.corp/ (To cover all UR

...

Resolved! GUI does not show system logs

On GUI i see traffic logs but no system logs.

LAst system logs are from yesterday.

Ran the below command

show log system direction
> equal equal

admin@EOCDC-G3-NGFW-2(active)> show log system direction equal backward
Time Severity Subtype Object EventID

...

How do I see what the value of variables on remote firewall from the command line?

I've had a problem when I change the value of a variable for a firewall in Panorama, for some reason it doesn't get pushed to the remote firewall. I can log in to the GUI of the remote firewall to see the variable value where it's applied in the con

...

UserID

Hello

Is Userd Identification feature works only whith Active Directory users account or also with Computers accounts ? I would like to create a security rule who allow access on our internal ressources only for computer with an active computer accou

...

Knowledge Base Single Sign-On Error

Hello!

Every few days I get this error and can't access knowledge base.

It is VERY FRUSTATING!!!!

Error started to appear after last tool upgrade. Does PAN have mailing list for resolving partner access issues?

Regards,

Maja

Resolved! Open port

I need to create security rule and/or not to allow port 6965 to a device. Do I need both a NAT and security rule? Need to find out from vendor if port is TCP, UDP or both. I have PA-3020 running PAN-OS 8.0.13.

Discussions