I am unable to access the firewall through both the GUI and CLI modes, but the internet is functioning properly. The firewall gateway is located at 192.168.0.1, and it is reachable via ping.
Hi if a admin user doesn't login for some time is it possible for the password to just expire ? Or could the account just automatically become locked out ? Is this such a thing ?
Dear Community i have 2-PA configured as HA and need to be redundant for ISP,so i have interface from ISP-A and another one from ISP-B, and from internal service i have VM server that needs only one IP statically work with NAT and 2-Vsys,and using static route for routing, my question is how I can make some change so I can make redundant for th...
Hi We have a doubt about the inclusion of CVEs in the “Vulnerability Protection” profiles. Currently [CVE-2025-0282][CVE-2025-0283] are not included in the list of signatures. Is it possible to request Palo Alto to include them and is there a procedure? Regards
Hi All, We onboarded the 1 pair of Palo Alto firewalls into panorama. It is successfully onboard. New Template stack pushed successfully to firewall. But the device group was failed with “Error: Number of address group(x) exceeds platform capacity(xx)”. Based on Palo Alto solution is to disable "Share Unused Address and Service Objects with De...
Hello Palo Alto LiveCommunity, I’m currently working on a task where I need to create a custom BIOC (Behavioral Indicator of Compromise) and add it to a restriction profile to block FTP command lines. Specifically, I want to prevent FTP-related commands from being executed by monitoring and restricting certain patterns. I also need help with...
Hello, In my customer support portal, I can't find the VM version for PAN-OS. Is this related to my license, or did Palo Alto remove it? Thank you! Best regards,Murillo Castiho
I am having issue with webservice stopped i tried to restart it is getting stopped GUI mode is not working only CLI is working
hi guys, I searched through and it looks like it's an know issue that speedtest.net is not correctly identified by app-id I use app -default setting on the policy The policy cannot really see speedtest.net's traffic and identifies the traffic as ssl, speedtest uses customer port tcp 8080 which is obviously not part of ssl app id defined...
I recently updated to 11.1.5-h1 on one of my firewalls and the software area updated to show the base versions and previous preferred versions we were running but I am not able to see that I am actually on the 11.1.5-h1 version. I assume it isn't listed since it isn't preferred but then how do I know for sure what version I am running? Do I need...
Looking for some assistance as I am building out a remote vpn using Connect before logon for my Palo Alto. Does anyone know a simple, easy way to set this up with LDAP. Some article are outdated and some are inconsistent in their approach verse other documents. Appreciate the help.
Hello team, i have been facing the below error when trying to commit changes in palo alto firewall pa-1420 invalid local dhcp setting for monitor destination 8.8.8.8 (module routed client routed phase 1 failure please help.
Hello, PAN-OS 8.1.4; GP 4.1.6I am using only the one VR with dual gateways and ECMP routing enabled with WRR (Weigthed 1/4 (WAN1=50, WAN2=200).I have one portal configured for WAN2. I have two (2) gateways; one on WAN2 and one on WAN1. When WAN2 is up, I can acces the portal and the gateway on that interface.When the portal is down (WAN2), and ...
For compliance reasons, specifically StateRAMP (and likely FedRAMP in the distant future), I'm looking for any hardening guides or STIG for the PAN NG-FW and Global Protect or even general best practices. I feel odd asking for "security hardening" for a security solution, but I'm just making sure all bases are covered. I've found a couple t...
LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries. You'll find this new area under the Articles section of the main menu: Our goal is simple: provide clear, comprehensive resources that address your most frequent issues. Using data-driven ...
PavelK
on:
How to build SCM Managed NGFW with no management internet access
reaper
on:
Server monitering -Connection refused
PavelK
on:
Commit Failed
