General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Force what Global Protect Portal to use

Hello,

Our users will have 2 Global Protect Portals to choose from.

The users sometimes log in to windows with a smart-card and sometimes with a normal AD-account (Username and password).

Not sure if it's possible but can we force what portal they c

...

Probably a strange question...but Linksys RV082 and PA VPN tunnel anyone?

HI

Been trying to get a VPN tunnel working between a Linksys Rv082 and Palo Alto. (dont ask...)

But no luck in the testing, i based my PA config on the Linksys Rv082 settings, wich i got from the person that is on the other end, but so far - no suc

...

Resolved! Captive Portal errors

Hello

Early today the captive portal stopped working and UserID didn't get any user mappings. Users couldn't be able to login by SSO or captive portal. After some investigation, we restarted the l3-service and it come back working.

The l3svc_ngx_erro

...

Resolved! global protect gateway ipsec connection and ssl connection

I have configured GP external gateway and it is working fine.

connection type is always SSL even though ipsec is checked in the config.

does GP supports ipsec connection?

or is GP connection only supports ssl?

why are there duplicated threats (protections) ?

Hello,

Browsing on the list of threats, i see many threats that repeat themself, only with different ID.

What does that mean?

Minimum number of ports in aggreagte interface?

What is the minimum number of interfaces in an aggregate interface, will config commit with a single interface?

Monitor multiple IPs in a PBF rule?

Running 8.0.x on our PA-3020 and PA-220 systems.

In our virtual routers, we can path monitor with multiple IP addresses and take action on AND or OR conditions, but PBF still seems to be limited to a single IP. I'd love to be able to monitor multipl

...

Resolved! Two firewalls, identical rules, different behaviour

As far as I've been able to determine, the configuration for the two firewalls (PA-500s) are identical (with different IPs/subnets obviously), but the way they handle blocked connections is very different.

On one firewall, a telnet to a blocked port

...

IPSec and DHCP relay

Can a DHCP relay be configured on the PA to be used by and IPSec tunnel also configured on the PA?

Resolved! SSL cert mgt-Chrome issues

I generated and imported ssl certificate for secure management. I also made sure the CA is on the local machine. I have no issues with Firefox or IE but on chrome, it shows me cert r=error for mgt interface. Did anyone face this before? please offer

...

Resolved! IPsec question

Hello

I have many IPsec connectios on my PA. But their are 2 that both use 192.168.100.x

Now IPsec A is policy based. So I have configured the proxy ID's. All working fine. Now I have narrowed the routes down to the 2 host I require. Which are 192.168....

Resolved! Issue with setting QoS egress value with API

For scripting purpose I need to be able to set egress-max values in QoS with the API.

First I created a QoS profile, TRUST-QOS, and set the egress-max to 20

In powershell, I have the following:

$paURL = "https://" + $PAIP + "//api/?key=" + $apiKey +...

Global Protect on Chrome OS forget and reset portal.

I keep having to click forget on the chromebook globalprotect client and re add the portal to get it to connect to the VPN on the PA firewall. This happens daily to many of the Chrome OS devices.

Also the + button to add a second portal does not work.

...

Resolved! internal routing being blocked

I'm having an issues with some internal routing I have two virtual router that have statics routes for an internal phone network on a different router in my trusted zone I can ping from computers in my lan but when i try and access any websites or ma

...