General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Identical Rules on 2 Firewalls

Hello

Is there a way in which I can see which security rules are identical on 2 Palo Alto Firewalls?

Probably with Migration Tool or something?

BR,

RJ

Resolved! Feature Request: Preference Option to Restrict Zones/Objects to Only Existing When Building Policies

The current PAN-OS GUI makes adding objects and zones on the fly very easy while building policies.

Unfortunately this sometimes casues unwanted side effects:

As an example, when building a security policy including the zone "Admin" I started typing "a

...

Resolved! PanOS 8.1.5 No SNMP ifInOctets/ifOutOctets

We recently upgraded our firewall to version 8.1.5 and noticed that SNMP data traffic monitoring stopped working. If we get de SNMP values, we receive this informations:

IF-MIB::ifIndex.9 = INTEGER: 9 IF-MIB::ifDescr.9 = STRING: ethernet1/4 IF-MIB::...

Resolved! DNS is changing?

Anybody has hear about it and are PA firewalls effected by it. It seems they are making some changes to its functioning. Does PA application supports the said change?

https://dnsflagday.net

______________________________ What is happening? The curren...

GP+DECRYPT+MFA

Hello,

I have been playing around with this setup:

- user connect to internal network with globalprotect

- initiating any connection to internal resources trigger ether a redirect to captive portal for MFA challenge or a global protect popup with the

...

Resolved! Application changed color in ACC.

Hello,

I changed a timeout value on an application and then changed it back to original setting, after this:

The application show up in a greenish color (like the support info button color) in ACC

The application lost its category and sub-category. Bo

...

Resolved! rule any any with no security profile

need to confirm if i use rule with any any and no security profile does it do any layer 7 inspection?

is this same as app override?

Resolved! LACP question

I was given this design to implement on our PA 5050's. This would be to segregate a user segment (4500x-VSS) from the data center (7K's vpc). Can anyone tell me if this is a valid LACP connection? I have never seen it done without a Stacking or VPC l

...

H323 Gatekeeper Question

Hello everyone,

The agency I work for is experiencing H323 call drops. After some research I found documentation here that Palos do not support H323 signaling when a gatekeeper is in call routed mode. The gatekeeper is currently in call routed mode.

...

Resolved! What is best way to provision Global Protect and LSVPN portal and gateway on one device?

This is for a lab at the moment, but want real-world advice in case I attempt it.

I had a portal and gateway setup for client SSL VPN and wanted to add LSVPN. Due to complete documents for each type of GP feature, but none combining the two, I went

...

Create User based Internet access rule

Hi,

Could someone please advise how I can limit internet access by user?

I would like the below

Block level 1 - blocks the bad stuff but allows everything else

Block level 2 - blocks everything apart from an allow list

I believe I have set Enable

...

SSL Decryption not working with Policy based forwarding

I have configured SSL decryption with one ISP which is configured via default route and it is working fine. I have another ISP and I configured to forward internet traffic from particular endpoints (same trust zone) to 2nd ISP, for this purpose i cre

...

8.0.15 How is it running

Hello Community,

How is it running for those that have already upgraded? I would wait but the release of the recent vulnerabilities have pushed this forward for me.

https://securityadvisories.paloaltonetworks.com/

Thanks in advance!

Template not showing up in Device Groups

Created template I have Templates showing up over Network and Device tabs. But when I commit there isn't a radio button for templates and when you look under Device Groups and click the group I created it in, the template does not show up. Panorama 8

...

QOS Policy config with Destination NAT Traffic

Hi, all

How can i set to config QoS Policy for Destination NAT Traffic from untrust to untrust zone.

I searched for related knowledge but could not find it.

which one is right?
untrust to untrust (Public IP)
untrust to trust (Public IP)
untrust to trust (P...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help