General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

IPsec tunnels, VPN features & licensing

I have a few PA 200's all with base license ready to install for a multisite company that needs a full mesh all over broadband internet. I am willing to manually configure each IPsec tunnel one by one if that is a free option that does not require ad...

Resolved! XML Config from Panorama managed device, where are the policies?

Hi community,

scenario: When provisioning a standalone firewall with panorama and performing a config-sync to a non-panorama-managed passive HA peer, there are not policies etc.

After exporting the xml config from the active peer, I noticed, that the

...

Resolved! Updating MineMeld from 0.9.50 to the latest stable version

Hi guys,

I don't know if someone else have experienced that but I'm having some problems to update my standalone MM machine. I use CentOS 7.0 and started to use MM in 0.9.44 version. Following the procedures in

https://live.paloaltonetworks.com/t5/

...

Full mesh for multi site over broadband

I have a few PA 200's all with base license ready to install for a multisite company that needs a full mesh all over broadband internet. I am willing to manually configure each IPsec tunnel one by one if that is a good free option that does not requi...

Resolved! Atlassian custom Miner and Feed

I am trying to create a miner/feed for Atlassian IP-Ranges which they publish in a JSON file. I have configured the below and it all looks good and I have Indicators, but when I go to the feed URL it returns a blank page.

I created the prototype by

...

Resolved! PA traps certificate expired

Hi,

We have ESM Console and server using SSL certificate. This certificate has expired so we lost communication between traps and agents, and we only connect to ESM from the own server.

How can i renew the certificate SSL???? Its mandatory to install

...

Disable HTTPS

All:

I'm running MM Community edition, and for lab testing I need to disable the HTTPS redirect. I have followed the guide here, but still cannot get the HTTP-only running on the nginx:

https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Disab

...

Resolved! Error polling virus total

I'm running into an issue with the virus total miner. Once the API key is set it continues to throw this error:

2017-09-08T14:24:58 (2986)basepoller._actor_loop INFO: virustotal_notifications-green - command: 1504880698052 poll 2017-09-08T14:24:58 ...

Traps tray icon not reflecting after migration to 5.0 in Windows 10

For some reason 80% of the machines are missing the below file :

Path : c:\Program Files\Palo Alto Networks\Traps\

File : cytray.exe

cytray.exe file needs to be available in the above Path.

We did the upgrade from Altiris.

Newbie: Local (wildcard?) certificate(s)

I'm running a VM-100 with several zones where I have MS AD / WSUS in one, two zones with lots of wireless device management, another zone for vmware management etc.

Every day I run into web browsers yelling about unsecure acces to local device manage

...

Resolved! does PA support encryption AES-256-SHA and AES-SHA-HMAC-256?

I need to setup VPN tunnel with Cisco ASA

Does PA support Phase 1 - AES-256-SHA?

Phase 2

AES-SHA-HMAC-256?

I can only see AES-256-Scdc encryption?

Resolved! Base ID manager is reset

Anyone run into this issue? It raised a "Critical" log but appears to have occurred during a validate. Having issues finding any references on this alert discription.

Base ID manager is reset - System Log

ADSSP Integration for Cached PW Update

Wondering if anyone has successfully integrated ADSSP Cached Credential Updating with PAN VPN and GlobalProtect client.

Have tried to find command line references for the GP client but am coming up blank.

ADSSP needs to call the VPN connection durin

...

inter-logger-agent message in Panorama

Anyone know what this message refers to, and/or suggest any steps to trouble-shoot?

The message is showing up in System log of a backup Panorama M-500 manager. X.X.X.X is the IP assigned to dedicated port on primary Panorama M-500 manager. The int

...

Resolved! Microsoft Windows Auto Pilot and SSL decryption

Hi Everyone,

Seems the Microsoft Windows Auto Pilot does not work when SSL decryption is enabled.

I tested see no drops on the global counters and nothing on PA PCaps.

When disabled SSL decryption it worked fine.

Any ideas?

Mike