General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

VM-Series firewall on VirtualBox

Hi,

I know that VM-Series firewall requires VMware ESXi running vSphere 4.1 or 5.0.

But I don't have VMware right now on my laptop and only I have is Oracle VirtualBox 4.2.6 - just for tests and presentations (not for commercial purpose)

On VirtualBox I

...

Clientless VPN

Hi All,

can someone provide configuration example for Clientless VPN access through GP portal...
I was already used configuration steps explained on this page, but seem that it not helped in my case. I'm able to authenticate and open portal landing pa

...

Dynamic Routing on MPLS network with IPSEC VPN as backup route

We are new to the Palo Alto community and are looking for some advice as the best way to accomplish our networking end-goal.

We have several remote offices that are currently connected to corporate using an IPSEC VPN over the internet. Each site h

...

Delete inherited zones

Hello,

I'm creating locally a lot of new zones on a 3020 firewall, but committing it says the hardware limit is 40.

Currently I inherit 9 zones from a Global Template from Panorama, but I don't need that zones.

I cannot modify the Global Template. Ther

...

Application match... Sophos-live-protection to 8.8.8.8

Our logs show a numebr of connections from our DC's to port "53" application sophos-live-protection...

That's fair enough, I understand the concept of what sophos are tryign to do with this.

What I don't understand is why the destination is 8.8.8.8 a

...

Resolved! Create VPN Profile or Group for a vendor to access specific internal server

Hello all,

We snagged a PA820 to replace an old ASA 5510.

I think I have everything set and I am almost ready to cut over to the new PA firewall, with one exception: I am drawing a blank on the best way to setup VPN access for a support vendor.

With

...

mgmtsrvr - virtual memory limit exceeded, restarting

Has anyone seen this before? I'm looking for feedback on whether or not this is directly related to the VM Panorama sits on? This was the decription of an alert I received at 12:30EST today. Sure enough, Pano was rebooting. Any information provid

...

Resolved! Dynamic Destination Routing

Hello All,

i have a senarion in which a user vlan routed to internet link1 thorugh policy baseed routing now i have a one destination which has dymaic IPs and only can open with internet link 2 i want this destinatioon to be opend for the user vlan, h

...

Email attachment

Hi EveryOne

How i can block the email attachment (RAR ,EXE) file

What the proper way to check to fake email are incoming in a local network

Resolved! unknown-tcp when tls decryption is enabled

I have a VM-100 in my lab. I haven't used it in while but recently booted it up and upgraded to 8.0.12. I noticed a lot of unknown-tcp traffic for mostly any site when I enabled tls decryption. If i disabled tls decryption, the traffic is all ssl.

I

...

Resolved! AppID Rule with Service "any"

Hello,

I want to now the risks of allowing an application with any services.

Below an example. Thank you in advance

Kind regards.

Resolved! Panorama Shared Policy Zones

Hi all,

I want to understand before I deploy shared policy in Prod

I have 2*2 firewalls in HA (2 For DMZ, 2 For LAN) - I want to create a shared policy to both firewalls (LAN and DMZ)

For example,

In LAN I have 3 zones (Users, Servers, DMZ)

In DMZ I Hav

...