General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Asymmetric Routing and TCP syn check (Pulukas Solution)

Hi Everyone,

Asymmetric Routing and TCP syn verification is a common issue and there were many articles on how to resolve that, basically

1 - To change routing itself and make sure there are no asymmetric routing in the network - best from PA point of

...

Support for inspecting SSL message for kafka connect

We are using Kafka for messaging and have a requirement to inspect the SSL message sent to kafka broker from kafka connect. Kafka using binary tcp protocol with kafka broker listeners on PLAINTEXT://9093 (without SSL)

Can paloalto decrypt and inspec

...

Does Palo Alto (VM) firewall supported in VirtualBox?

Has anyone managed to installed and run Palo Alto (VM) firewall successfully in VirtualBox?

I've been trying to setup my own lab for learning purposes. Basically, this lab contains client, firewall, and server with different network segment.

Client --

...

VPN certificate expires

Hey!

My firewall is a PA-3020 with 8.0.7. There is a Global Protect gateway and portal, users can connect via Global Protect.

As portal address in the global protect app, we are using an address that is availabe in public dns.

Additionally, there is a p

...

What is application db = 0 and app.id c2s node (0, 0) s2s node (0, 0) in session id command

Hello Folks,

I am looking for some more information on session id command outputs. I see a session in free state with

application db = 0 and app.id c2s node (0, 0) s2s node (0, 0) . What does this mean ?

Is this that app-id engine of PAN is not

...

sync to peer failing

all of a sudden my sync to peer is failing anything I need to look at?

Resolved! Panorama 8.0 : Device Groups

Can you have 7.1 and 8.x firewalls in the same device group? Any issues with commits.?

Resolved! Use Domain EDL for purposes other than DNS sinkholing?

Can you use a domain EDL for other purposes or only for DNS sinkholing?

In other words, can you use a domain EDL in any policy rule in the same way an FQDN object can be used?

I would expect that you can, but wanted to ask.

Linux and TCP keepalive

Hi

Is there some reason that PA have a 1 hour keepalive value, where linux has a 2 hour timeout value.

Whats considered best practices ... reset the PA to 2 hours or bring down the linux keepalive value to say 1800

A

Resolved! No devices in deploy content window

I am having a problem trying to push Apps&Threats or AV from the panorama to the firewalls. We have a Panorama M100 at 8.0.5 (recently upgraded from 6.1.10) with 5020 FW's at same release. We are NOT able to do the reachback to Palo Alto servers sinc

...

Trouble installing manually or from ISO on ESX

Have followed all the articles I can find. Trying the ISO, I can login and basically gets stuck right after login at "initializing minemeld, this can take some minutes......", and left it for minutes/hours/days, just never finishes. Tried canceling

...

Resolved! The total number of dynamic_ip_port NAT translate called

Hello,

could someone explain me what means this counter, please?

The total number of dynamic_ip_port NAT translate called

thank you in advance

Palo Alto firewall does not display traffic log

I've just installed Palo Alto firewall VM version in virtual box.

I was able to access it via WEB (https) and SSH.

However, when I check traffic log it was empty.

I generated a few traffic such as ping and nmap scan against firewall IP, but still no t

...

Resolved! Challenge with Cisco ISE (Identity Service Engine) Integration for user-id mapping

Hello All,

I am currently trying to integrate the cisco ise (radius server) to the Palo Alto Syslog filters so that the users that be tagged and policy applied to different categories of guest based on ISE permission.

Currently ISE seem to be sending a

...

Palo Alto Firewall 8.0.3-h4 integration with ISE document

Hi,

Is there any document for Palo Alto configuration to integrate FW login authentication with Cisco ISE.

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

Asymmetric Routing and TCP syn check (Pulukas Solution)

Support for inspecting SSL message for kafka connect

Does Palo Alto (VM) firewall supported in VirtualBox?

VPN certificate expires

What is application db = 0 and app.id c2s node (0, 0) s2s node (0, 0) in session id command

sync to peer failing

Resolved! Panorama 8.0 : Device Groups

Resolved! Use Domain EDL for purposes other than DNS sinkholing?

Linux and TCP keepalive

Resolved! No devices in deploy content window

Trouble installing manually or from ISO on ESX

Resolved! The total number of dynamic_ip_port NAT translate called

Palo Alto firewall does not display traffic log

Resolved! Challenge with Cisco ISE (Identity Service Engine) Integration for user-id mapping

Palo Alto Firewall 8.0.3-h4 integration with ISE document

Site to Site VPN

advanced url filtering question

How to install a Cortex XDR agent communicating through the Palo Alto Networks Broker VM?

Are there signature release for following vulnerabilities?

Importing list of Blocked IP's and URL's into EDL

Re: Are there signature release for following vulnerabilities?

Re: OS Upgrade path to 10.2.10-h9

Re: Regarding Security Advisory CVE-2024-3393

Re: Anyone experiencing slow websites with PANOS patched for CVE-2024-0012/CVE-2024-9474?

Re: receive incoming errors / 'rcv_fifo_overrun'

Unlock your full community experience!

Resolved! Panorama 8.0 : Device Groups

Resolved! Use Domain EDL for purposes other than DNS sinkholing?

Resolved! No devices in deploy content window

Resolved! The total number of dynamic_ip_port NAT translate called

Resolved! Challenge with Cisco ISE (Identity Service Engine) Integration for user-id mapping