General Topics
Showing results for 
Search instead for 
Did you mean: 
We are conducting regularly scheduled maintenance over the weekend, which could cause some downtime on LIVEcommunity. We apologize for any inconvenience.
General Topics


Thank You for Filling Out the LIVEcommunity Experience Survey!

If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users. 


In the past six


jforsythe by Community Team Member
  • 1 replies

pa-500 doesn't resolve host in log



I have Pa-500 with firmware 7.1.6


I have created dns registers for laptops, pc and mobile phones (inverse and direct zones).


In Monitor/Logs/Traffic. When I check resolve hostname. It resolves sources only for laptops or pc are in domain.


It does


Resolved! Console conection using CISCO terminal server



First of all i would like to say that im able to conect with serial cable to the Console Port with my laptop.


The issue only occurs when i try to conect to the Console port via Cisco Terminal controller (TTY)

At the begining i thought was a problem


Confused over EBL size limit

We have a 3020 running 7.0.8 and are experimenting with MineMeld.


As soon as we get close to 5k IPs on the combined EBLs we get an error on a EBL refresh that it's been truncated as it's over the limit.


Palo Alto's own KB suggests that on an entr


Resolved! Migrating old FW Config to new device

I have 2 PA-500's and have been planning to purchase a new device.  Perect timing with the new PA-800's, fits my needs and then some.  Is it possible to migrate my current configurations from the 500 to the 850?


Network-ethernet-Radius-Users wtc as w


Resolved! Is the Intel Atom c2000 platform in any Palo Alto Products?

There is an advisory released by Intel (and probably Cisco) about the Intel Atom c2000 platform and a clock signal component failure that can brick devices using that platform.  The Atom c2000 was marketed towards (among other uses) networking equipm


bshelton by L0 Member
  • 2 replies

License Transfer



I am not sure if this is the right place to seek this type assistance.


Is it possible to transfer subscriptions from PAN-3050 to VM-300 or VM-500?


The client has a pair of PAN-3050 with TP, URL4 and Wildfire subscriptions which will be expired


MiZhang by L0 Member
  • 2 replies

Resolved! Skype is not working with allow rule



We have a demand to allow skype for internal employees. However, we've created a security rule to allow the following applications:






Still skype couldn't connect with an error message "please check your internet


URL Reclassifications to Unknown in 20170207.20264



I was just wanting to see if anyone else has noticed that in URL DB 20170207.20264 many sites are being reclassified to Unknown?


sites include (used for Australian Financial Review website)


PhilH by L2 Linker
  • 5 replies

Natting issue with new subnet.

I am applying destination nat. Natting public ip(untrust zone) to internal ip(trust zone). Public ip subnet is /28.

When access public ip in the monitoring logs it shows me dst zone as Untrust whenit should show dst zone as Trust.

I have policy in plac


Cisco AnyConnect over IKEv2 killed by PAN-OS 8.0



I've been running PAN-OS 8.0 since release, and immediately got problems with Cisco AnyConnect over IKEv2. Even if the session is very much alive, PAN-OS 8.0 kills it of after a random amount of time, usually a couple of hours.


If I change the An


GI-1 by L1 Bithead
  • 5 replies
Top Solution Authors