This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4246 Views
  • 0 replies
  • 0 Likes

Resolved! Interface Management profile with public IPs?

Hi folks, We have a PA200 that is in a remote branch location. It's connected via IPSec tunnel for management purposes.After we had to switch it out last year because of a recall, I found it useful to create an interface management profile with our specific HQ public IPs access to it, in order to login to it when the IPSec tunnel was not availa...

OMatlock by • L4 Transporter
  • 4691 Views
  • 3 replies
  • 0 Likes

Resolved! 2-Factor Authentication for Admin Login

HI all This is likely to have been asked before, but a search of the Live! forums didn't turn up anything relevantAs part of security best practices in my organisation, I'm looking to enable 2FA (via DUO) on the admin web interface I have the instructions for adding 2FA to user browsing via Captive Portal, and for adding 2FA to GlobalProtect con...

Block Hardcoded IP's containing files

Hello I am curious if there is a way to block hardcoded IP's containing applications? So I would allow downloads when there is a domain name but not allow the download when it is a IP. Example: http://x.x.x.x/filename.exe

Failing to apply VM license

Hi Guys, I am trying to apply CSSP license on one virtual firewall. When I try to attach the received license I receiving the following error: "Failed to install licenses, Model incompatible: feature model is VM100 while the device model is PRA” I got the same for two different firewalls, I am starting to suspect that the template has some issue...

Resolved! Skype files download issue.

Good day!After the recent update Skype stop to function normally, I can upload, but can't download any file.Temporary solution was not to decrypt this category - "internet-communications-and-telephony".But I don't think that this is a normal solution. I've added skype, stun and web-browsing rules to allow skype traffic, but I have 2 Block Proxy ...

policy.jpg

Resolved! How to make suspended device functional from other peer

Hello, We were attempting a firmware update to HA pair. After upgrading the passive peer, we confirmed it was up and the user-id was populated and then suspended the active peer in order to update that. Unfortunately it turns out that management was only enabled on the WAN interface of the originally active peer meaning we can no longer access t...

SNMP comunity string limitation

Is it true that PA firewalls (eg: PA220 or 500) can only support or allow a single SNMP v2 community string to be configured for polling? (ignoring traps) ThanksGab

gabcdt by • L0 Member
  • 1920 Views
  • 1 replies
  • 0 Likes

Global Protect client install

Global Protect silent install - Can you specify mutable portals during a silent MSI install of Global Protect? msiexec.exe /i GlobalProtect64-4.1.9.msi/qn PORTAL=gpgateway-a.companyname.com, gpgateway-b.companyname.com

BPA recomendations on unconfigurable pre-defined profiles.

BPA recomends making changes ( Sinkhole, Packet capture) on a number of our Security profiles. For example adding packet capture and sinkhole DNS. But one of the rules it recomends this on is the pre-defined "strict" Anti Spyware Policy. And other changes to the default Anti Virus policy... Neither of these can be modified so will fail to meet ...

Resolved! Need to Send Output of Command to Text File

Hi there,Can I send (print) output of a command to a csv file? (PA500, software: 8.1.4)For example the following command lists the users of the AD and disaplys on the screen. I need a switch/parameter or perhaps another command that lets me send the output (the list of the users) to a text or a csv file. Is that possible? Example of the command:...

Resolved! Logged in Admins - Gui - Idle Timeout

When I login to PA I see Logged in Admins - so many users with ilde timeout.How can i fix this we have idle time out Auth with 15 mins. Is there any config i can do so that PA can log out users from Logged in Admin display in GUI?

MP18 by • Cyber Elite
  • 10294 Views
  • 8 replies
  • 0 Likes

PUBG Block

HI Team, Can PUBG APP ID will be created by palo alto for blocking the PUBG game traffic. This app is worldwide used, It will be great if palo alto come up with APP-ID for blocking and allwoing this traffic. RegardsVenky

Resolved! FQDN Policy

Is it possible to use a wildcard when creating a policy based off of a fqdn?Thanks

aguley by • Not applicable
  • 12015 Views
  • 8 replies
  • 0 Likes
  • 24359 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks