General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Need some suggestion about the routing between 2 internet outgoing interfaces

I recently submitted a case to PA support about 1 of the internet facing interface cannot contact outside nor contact from outside. Use ping to diagnostic and found that the ping (request) and ping (reply) use 2 different route ).

This is because the

...

Strict TLS 1.3 in chrome 72 or 73?

Hello Guys,

Which information is true?

Chrome 72(in topic) or Chrome 73(in article)?

Resolved! Feature Request: Panorama: Managed Devices Summary for Dashboard

One of the most common at-a-glance sections of Panorama I use for overall environment status is the Managed Devices Summary page. This is the only / easiest place I know of to check on the HA status, Policy and Template Sync state and Last Commit sta

...

Question to Signal, Skype and Google Hangouts video calls

Hey guys,

When I want to do a video call with Signal messenger, I need to add two rules:

Rule1:

App: Signal

Service: application default

Rule2:

App: STUN

Service: any

Signal accesses random destination ips on random ports.

Skype and Google Hangouts need t

...

how to download the ca certificate for the anydesk

HI Team

I getting an error while connecting to any desk error code: could not connect to any desk network SSL_14090086

I tried to add the SSL decryption list but still, the issue remains

how to add the trust certificate for any desk and is there any

...

Resolved! User not in Allow list

Hello,

We use SAML authentication profile. with PAN-OS 8.0.13 and GP 4.1.8.

Followed the document below but getting error: SAML SSO authentication failed for user. Reason: User is not in allowlist.

http://saml-doc.okta.com/SAML_Docs/How-to-Configure-

...

Resolved! userid in multiple VSYS environment

Hello,

We are using PA cluster in multiple VSYS environment. We would like to be able to configure user / group based policies across all the VSYS by sharing userid mapping table with all the VSYS (the user identification baseline is the same for all

...

Resolved! Troubleshooting Application Incomplete with two way TCP traffic

We are having issues with one application while migrating the network from ASA to PA

PA is Running 8.0.9 on 3020.

Application shows as incomplete with more than 4 packets.

We see trasmit and receive in the PA.

Nothing in threat logs.

As per TAC they say

...

Resolved! Phase 1 is down but phase 2 is up- test vpn phase 1 and 2

we have tunnel from PA to vendor which is using Cisco ASA.

When there is no interesting traffic tunnel is down by design this part is ok.

but today i saw phase 1 as red and phase 2 as green on gui.

I did the

test vpn ike command and phase 1 was green

...

PA-VM not recognizing SSL and denying traffic

Hello,

We are implementing SSL Decryption to PA.

Because of this forcepoint agent (that is installed on theworkstation), the return traffic from the Internet (ie: facebook.com, etc) will be denied by the firewall as the SSL certificate has been chang

...

Resolved! Does PA global protect gateway support remote access vpn without GP client

Need to know if PA Global protect can support 3rd Party Remote access vpn?

For example remote access vpn from modems using ipsec?

We need to support remote access vpn for some clients where the end user will not have the GP client installed on their

...

Resolved! Error Message in PANGPA logs

Hello,

We are using 4.1.0-98.

The clients at fault work fine through a tethered mobile, however when connecting to their home WiFi the connection is successful but nothing will work through the VPN.

Below is a log snippet. What exactly is going on he

...

Critical System Alert

The firewall has flooded the system logs with the following message:

Traffic and logging are resumed since traffic-stop-on-logdb-full feature has been disabled.

Software Version- 8.0.3-h4

Model: PA-3020

Disk space looks fine:

Filesystem Size

...

Incorrect User-ID

Hi all,

I'm having an odd issue. I have global protect configured and using Okta (saml) authentication. Now everything is working fine except that a handful of users have the wrong user-id. All users are expected to have their email address as the

...

Resolved! Identical Rules on 2 Firewalls

Hello

Is there a way in which I can see which security rules are identical on 2 Palo Alto Firewalls?

Probably with Migration Tool or something?

BR,

RJ

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

Need some suggestion about the routing between 2 internet outgoing interfaces

Strict TLS 1.3 in chrome 72 or 73?

Resolved! Feature Request: Panorama: Managed Devices Summary for Dashboard

Question to Signal, Skype and Google Hangouts video calls