General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

New MineMeld install on CentOS 7 ... joined to AD domain. WEBUI login failing - bad creds

We have been running Minemeld on Ubuntu 18.04LTS, but since that OS is EOL I am working on a replacement server running CentOS 7. The server was built for me by the server team and was joined to the domain. I use my AD credentials to ssh to the server and then use sudo on the install commands. I used the instructions in github and the install w...

Resolved! Device document error

Hello all, I have a PA-220 I am trying to import into Panorama, but am getting an error. I have added the Panorama IP on the PA-220 and the PA-220's serial into Panorama's Managed Devices, and it's showing connected. However, when I go to Import device configuration to Panorama, I get the "Device document was not found for configuration import...

Resolved! Global protect users issue

Hi Experts, I configured global protect SSL VPN all worked as expected but i am facing an issue, GP users are not showing up on my monitor tab, i know that its a routing issue i did the below routing and created security policy to allow all GP traffic to have full access but still i can't access any internal resource in my network and not able ...

Resolved! Userid agent server monitoring method

Hello, I wonder what is the port / protocol used by windows UserID agents to monitor Exchange and AD servers ? Indeed I have another FW between my PaloAlto device and the Active Directory and Exchange servers I want to monitor. Is this SMB traffic on port TP 445 ? Is this the case for any version of AD / Exchange servers ? I can't find any infor...

SSH Decryption

Hi. If my FW is doing SSH decryption and sending all decrypted traffic out of a mirror port where my Kali machine is, what tools would be able to "read" the username/password from the decrypted SSH traffic? I was looking for something similar to what "dsniff" does for telnet; TELNET : 10.1.1.1:23 -> USER: myuser PASS: mypassword So basically,...

Resolved! Suddenly receive GlobalProtect Portal not found error only with specific Internet Service provider.

Suddenly I am receiving the error that GlobalProtect Portal not found or Invalid portal. Please contact your IT administrator.Earlier I had GP client version 4.1.2-11 installed So as a part of troubleshooting step I have upgraded to 4.1.8-2 but still receiving the same error. Also, I have restarted the PanGPS services and restart my laptop but ...

Resolved! Disable HTTPS

I am running pfBlockerNG.It cannot connect to Minemeld because of the self-signed certificate.This is for my home, so I don't have a signed certificate to use.Is it possible to simply disable SSL on the web server so I can get past the cert error? Thanks

outside to inside nat tcp and udp specific?

i have a situation where outside users will tupe in a public ip which the palo alto will nat it into a inside privtae address likedestination "public" x.x.x.x port udp 8443 >>> translated destination "private" y.y.y.y udp 8443 ,but when i tired to do it i couldnt set the tanslated address port to tcp or udp? does it take the same tcp ...

Resolved! GlobalProtect with MFA - Always On

I was wondering if anyone here using GlobalProtect with MFA, such as Duo, Okta or Ping. Currently, clients portal app is set to User-Logon (Always On). I'd like to implement MFA for GP, but also keeping the always on functionality. The question is if the user does not enter their OTP, then GP will not connect. This would circumvent the always o...

TAP multiple virtual routers

Has anyone successfully setup a TAP interface on a pair of 5220s with multiple VRs to send the traffic to a single TAP interface/zone? Trying to integrate a sensor appliance in, but it's not passing any traffic...open to any suggestions at this point.

Resolved! possible to use mgmt port subnet same as inside int subnet?

is it possible to set the mgmt port ip subnet same as the inside interface ip subnet? or it needs to be different subnet?

Resolved! two Internetconnection IpSec build

Hello, I have two PAs and want to build IPSec tunnels between them. one PA A has a static IP. The other PA B has two internet connections. One with a static IP and one with a dynamic IP. Now I want to build two tunnels from device B to the A side. my two internet interfaces eth 1/4 has the IP 192.189.5.4 and the router behind it has the IP 192.1...

Facing issue in pushing the policy from Panorama to firewall

Dear Team, We are facing issues in pushing the policy from Panorama to firewall. The commit is successful in passive device but having problem in active device. Tried 2 to 3 times but same issues. Thanks in advance

Resolved! Granular URL Monitoring

I want to be able to grab full URLs when specific sites are visited e.g. github so I can see what app/repo is being hit. Right now all I get is the domain. How granular can URL monitoring be? Can I get a full URL from URL filtering or URL category hits? Can I trigger a packet capture when specific URLs are hit?

Pushing From Panorama to Firewall, Commit Failed Ethernet 1/1 in use.

Guys sorry for the newb question but our company just up and ordered a bunch of PA stuff. We configure a firewall to access the Internet and connect to panorama on Ethernet 1\1. We import the devices settings into panorama and achieve a sync. Now we would like to create a template stack and device group and push everything in panorama back to t...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!