General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Total Objects and Device Groups

Hello! I want to start this off for apologizing if i do anything wrong here or miss any processes as this is my first post.

I had the question for the community to see if anyone has ever ran into something like this, or what my best course of action

...

Resolved! how to unblock this sub-url?

I have a URL filtering list with *.github.com in custom blocklist. but I want to allow one specific sub-url https://github.com/abc .

added the sub-url to the custome allow list but didn't work. I'm assuming because of the url filtering order of prefer

...

Resolved! How is Global Protect SAAS licensed?

Hi;

In addition to having to have a licensed Panorama appliance, do you need to have a per user or per device license?

Kindly

Wasfi

change standalone node to HA

I have Standalone PA 3020 up and running , is being manged by Panorama and now I need to add another PA 3020 to bring in High Availability.

Please help me with the steps that I should follow.

In Panorama We have template stack and Device group for alr

...

GTP & SCTP Protection

Can someone in this forum tell me about GTP & SCTP Protection features? Is there any deployment reference for GTP & SCTP feature?Can we only inspect GTP-C (Control Plane) only?

Resolved! Polling Error with Miner

Hello I was wondering, I was trying to fix one of my miners that the URL seems non-existant. The URL is from Palo Alto : https://minemeld-updates.panw.io/deprecated-feed.txt

I was wondering if any of you found the new URL to which it could be moved, I

...

Client Authentication Sequence only works for 1st item in the list

I configured Client Authentication Sequence for both GlobalProtect Portal and Gateway for both LDAP and local database. For some reason, only the first item in the list works. It does not seem to try the rest of the sequences in the list. If LDAP i

...

How to migrate config from expedition tools deploy to panorama

Hi Expert,

Please suggest to me about how to deploy config from Expedition Tool (Migrate config old firewall other vendors such as juniper )to panorama in the case doesn't config on the local firewall of multiple firewalls per sites.

Thank you

Minemeld Installation OVA + ISO : LiveCD or removable?

Hi everyone,

I want to install Minemeld following the official tutorial [1] that uses an Ubuntu OVA + MineMeld ISO that installs the software during the first boot. My question is if that ISO can be removed after first boot and the consecuent install

...

Azure Datacenter IP Dynamic List Issues

Hi all,

We have the azure_cloudIPS miner, processor and outpur working and can view the list of IPs via the link (https://minemeld.mycomp.com/feeds/AZ_DC_IPS). We have simplar feeds setup of Office365. However, the on teh PaloAlto, the dynamic l

...

Advise on using AD user-id in local PA groups?

I am struggling with utilizing ActiveDirectory groups in firewall policy. My concern is then our AD administrators have control over transversing our firewall policy. Generally speaking say for example we have a FW policy setup where AD group ServerA

...

Resolved! How often does the Integrated User Agent query the Domain controller for security logon events?

Hi;

How often does the Integrated User Agent query the Domain controller for security logon events? Is this period the same if you run the agent on a separate host?

Can you change this time.

Kindly

Wasfi

Resolved! New GP deployment - DNS, ping, and tracert work, but no app traffic

I've set up a new GP config on a new PA-820 firewall. I have an old firewall I'm replacing, but I'm running them side by side. On the new 820 GP, I can connect with a GP client, and then ping internal servers. I can verify that DNS is working with ns

...

Resolved! What happens when you do switch user, does the integrated User Agent logoff the original user?

Hi;

What happens when you do switch user, does the integrated User Agent logoff the original user? Does the original entry in the user to IP mapping table get overwritten ?

Kindly

Wasfi

Resolved! User-ID Proof Of Concept - With Proxy

Good afternoon Team,

Pardon my stupidity here. I'm running a PoC at the minute and customer is keen on the User-ID aspect. However, the have most of their users behind a proxy.

We have configured the PoC in standard TAP, with LDAP server profile etc

...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Total Objects and Device Groups

Resolved! how to unblock this sub-url?

Resolved! How is Global Protect SAAS licensed?

change standalone node to HA

GTP & SCTP Protection

Resolved! Polling Error with Miner

Client Authentication Sequence only works for 1st item in the list

How to migrate config from expedition tools deploy to panorama

Minemeld Installation OVA + ISO : LiveCD or removable?

Azure Datacenter IP Dynamic List Issues

Advise on using AD user-id in local PA groups?

Resolved! How often does the Integrated User Agent query the Domain controller for security logon events?

Resolved! New GP deployment - DNS, ping, and tracert work, but no app traffic

Resolved! What happens when you do switch user, does the integrated User Agent logoff the original user?

Resolved! User-ID Proof Of Concept - With Proxy

A palo alto command doesn't stay after reboot?

Where did the critical issues page move?

Zero-Trust Strategy for Prisma

Undetected APP dependency?

Python SDK

Re: Undetected APP dependency?

Re: Query on URL category change

Re: IPSec VPN not getting any response from peer

Re: New periodic alert: Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform.

Re: What is still missing or needs to be improved in PA Next Generation Firewalls ?

Unlock your full community experience!

Resolved! how to unblock this sub-url?

Resolved! How is Global Protect SAAS licensed?

Resolved! Polling Error with Miner

Resolved! How often does the Integrated User Agent query the Domain controller for security logon events?

Resolved! New GP deployment - DNS, ping, and tracert work, but no app traffic

Resolved! What happens when you do switch user, does the integrated User Agent logoff the original user?

Resolved! User-ID Proof Of Concept - With Proxy