General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

2 Different remote VPN connect methods on a single portal&single gateway

I have external contractors connecting to my GP Portal in an on-demand connection setup.Is it possible to enable 'always-on' VPN on same portal and gateway pair alongside with on-demand? thanks.

Resolved! sflow traffic denied from certain IPs even though rule allows it

I'm seeing an odd issue where I've got a rule allowing sflow traffic coming from a WAN zone into my server zone where my monitoring servers sit. Most of the traffic passes as it should, but there are random subnets where the rule is being denied with it showing it is hitting the default deny policy. The only filtering on the rule is for port 2...

url_filtering problem

HI all,We have a cluster of 2xPA3050, for protection to untrusted zone. Last week we enabled the trial license for url_filtering. Since that moment we have met a special problem. We use a citrix application over ssl in the cloud. This citrix server is perfectly reachable, but after the authentication, the application seems to hang. We disabled a...

Resolved! Panorama VM 8.1.5

Hi I have just upgraded to 8.1.5 VM of panorama. I have rebooted a couple of times, but my console (of the vm) is getting filled up with INIT: id "s0" respawning too fast: disabling for 5 min I have logged it with support - but the engineer doesn't really have any idea he want to reboot into maintenance mode and rebuild it / re install - but he...

Resolved! Upgrade path to 8.1.6 from 8.0.14

Hello can you advise on the recommended upgrade path from PAN-OS 8.0.14 to 8.1.6 ? can i install directly the 8.1.6 version or do i have to install first 8.0.15 ? so it is 8.0.14 -> 8.0.15 -> 8.1.6 ?OR8.0.14 -> 8.1.6 ?OR8.0.14 -> 8.0.15 -> 8.1.0 -> 8.1.6 ? thanks in advance

Resolved! Single Sign on configuration

HI every one , any one help me to configure signle sign on in palo alto . as per my expirence we use to have agent in fortinet for sso. but in palo alto, i never configure SSO before and i,m not able to find any SSO Step by step, We have Active directory Envirement and Palo Alto 3220 HA . any link or video

Resolved! Commit Failed and Unable to Restart Device and Management Server

On PA 200 running 8.0 unable to commit it shows failed.Running and candidate config is syn. 1>>Did Commit Force no luck2>>During Commit ran the below command it state of init does not change show management-clientsClient PRI State Progress-------------------------------------------------------------------------routed 30 init 0ha_ag...

Resolved! PA to Cisco ASA Site to Site IPSEC with source as user id instead of IP address

Need to know is it possible to use Site to Site IPSEC with Cisco ASA and use USer id instead of source address in the Palo Alto? What we want is instead of source IP address we can config the user id.

Resolved! No Traffic Logs in CLI and Gui

No traffic logs in cli and guilast log i see is midnight 2AM MST debug log-receiver stats all logs incremented tail mp-log logrcvr.log shows 2019-02-01 02:58:42.332 -0700 Error: _write_task_disk_flush_process(pan_logdb_writer.c:1501): Error executing the disk flush routine from write_task_disk_flush_process2019-02-01 02:58:42.332 -0700 Error: _t...

What is current PAN OS version is target or recommended

Please recommend

Dear all, Can you recommend to use 200 users for PA firewall? What kind of firewall we should use for 200 users? Best regrets,Cardi Moe

Resolved! Failover PPPoE Connections

We have PA-200s and 220s that we provide to our branches that have their own internal range that gets advertised into our network through global protect. They all have their own internet connection but if that goes down then we have no redundancy in place. I've been looking at the multiple ISP docs for failover and i can do that successfully wit...

Resolved! URL Filtering with Any Any

Hello all, We are preparing a firewall in which the first security rule has to be :Source and Destination: ANYFrom TRUST Zone to INTERNET Zone. Application and Service: AnyAnd then there is a URL Filtering profile attached to the rule. So will this rule match all the traffic coming from TRUST Zone to INTERNET Zone. Or when URL Filtering profile ...

Does PANOS is impacted by DNS Flag day ?

Hello community, Do you know if PANOS is impacted by DNS flag day ? I know CheckPoint and Juniper SRX are impacted by this change DNS config. But I do not see any info provided by Palo alto about that. Best RegardsAndres P.

Suggestion for Panorama update

Within Panorama, while managing client firewalls, routinely the customer wants some variation of the built-in URL category restrictions. While it is great to have so many categories and for the most part they are well apportioned. However, to get around the one off requests for sites to be opened that are in a category that is blocked, it is our...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

2 Different remote VPN connect methods on a single portal&single gateway

Resolved! sflow traffic denied from certain IPs even though rule allows it