General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Remove object tag via CLI?

Static tagging via CLI is pretty straight forward, but how to remove a static tag via CLI?

Resolved! When to use ZoneProfile and DoS Profile

Hello All - Can i understand that Zone Protection Profile is to Protect Firewall itself and DoS Protection Profile is to protect the servers and hosts behind the firewall from Internet?

Can i achieve a DoS protection (For example SYN Flood attack) onl

...

"Install media mount failed" when trying to create bootstrap USB

I am attempting to create a bootstrap USB on a PA-200. The Palo site provides pretty good procedure documentation, but not much for troubleshooting. I have managed to create the bootstrap.tar.gz file and upload it to a PA-200 running Pan-OS 8.0.3. I

...

Resolved! Wildfire Verdict benign / Action block

I'd like to understand how Wildfire works. I have this example where Verdict is benign and action is block. Why?

GlobalProtect - Windows 7 Issue

The company I worked for observed an unusual error today with just Windows 7 users of GlobalProtect

Windows 10 & Macos users were unaffected.

We use okta verification to allow authentication btw

In a nutshell, did some testing in virtual machines runn

...

Resolved! CDR report

Did anyone receive a threat report from palo alto and hushly?

"Here is your Palo Alto Networks - 2018 Cyberthreat Defense Report you requested"

Resolved! Traffic Reports Bytes Field Empty

This probably has a very obvious answer, but google searches for the solution wound up showing me irrelevant pages...probably my fault as well.

I am running various traffic reports, and all of them lack value in the bytes field. Any idea what is wro

...

Panorama - Commit getting stuck at 0%

I have got PAs in two DC, each DC have PA in active-passive unit, when I commit to one of the pairs in one of the DC, the committ is stuck at 0%.

I see the Panorama is connected to "Passive" FW instead of the active FW , could be the reason why the c

...

Resolved! MineMeld can not get O 365 JSON format list

Hello

[Failure event]
In the case of O365 's xml format, when MineMeld received traffic after ClientHello, I got a list but if I set config for JSON support I can not get a list.

[Prerequisites]
MineMeld will go through Paloalto and do Internet com

...

OSPF, VPN, routing and distribution

I'm trying to solve a routing conundrum to improve a remote site and provide redundancy, and hoping others may have some solutions. The short version is that we have the remote site with basic commodity internet using VPN to connect back to two datac

...

Resolved! 802.1x wired authenicaton with MS CA and paloalto

Dear Sir,

I am beginner in 802.1x authenication and paloalto.So please help explained and guide.

I want to use 802.1x with MS CA.Can i use paloalto firewall as a policy enforcer for 802.1x authenication ?

can use PA as a radius server for user log and m

...

Authtenticate non web services such as Telnet/FTP without Global Client

Migrating a Cisco fw to a Palo Alto and the Cisco has the ability to authenticate users to external Radius for FTP transfers based upon policy rules - the end user simply gets a user name and pass prompt which works across all platforms and can be s

...

Resolved! MFA "SSL Connect Error"

I am testing Multi Factor Authentication with Okta. I have configured everything (including certificate profile) as per the guide as well as Okta specific YouTube video, The first factor (active directory auth) is working fine, however, I am getting

...

Arris (AT&T Fiber) to PA-220

All,

I have an Arris (BGW210-700) set up as 192.168.2/24 (DHCPed) and have successfully configured the IP Passthrough to the PA-220. However, I am unable to get outbound from the PA-220.

Has anyone run across this? I have the Arris going into 1/1 (a

...

Resolved! Allow internet only after HIP fail

We are looking to configure the firewall rules where if a known user fails the HIP check, the user has access to only the internet, and not the intranet.

I currently have the rules configured such that failing the HIP check allows the user to access

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help