General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Resolved! Palo Alto's Version on ASA Packet-Tracer Command

Coming from an ASA back ground I am trying to learn more about troubleshooting in the PA. From what I learned so far there is no command in the PA that tests the full path of communication similar to packet-capture in the ASA. When in CLI I see there is a test command that breaks out different components of the communication path. I can test ...

Resolved! Custom Report Syslog

Hi All, I have a client who asks me if it is possible to generate a report (for example, an annual report) where part of the records are stored in a Syslog.My question is, can the FW extract information from the Syslog to create a report?I appreciate your help.Regards

Resolved! Query on Panorama

Our panorama is in Legacy Mode with no additional disks.We are planning to do two things.• Adding another 2TB disk for logging • Change it from Legacy Mode to Panorama mode.I’d like to know the best order to follow. Can we add the disk first (which will also start moving the logs from the system disk to the new disk) and then change it to Panora...

globalprotec vpn version

Hi all, What is the latest most stable globalprotect version ?? Thanks,Lakshitha.

captive portal from Pan-OS 8.0

Hello community, Does annyone know a manual step-by-step on how to configure captive portal with Pan-OS from 8.0 with authentication rules. the admin guide seems not to clear to me. I´d like to configure captive portal in redirect mode. Does anyone know a manual or you can point out in brief what elements do I need to make this config? Thanks in...

URL filtering https pages

I can’t seem to get this working. I’m trying to block bbc I player but neither url filtering or APP-ID does the job.Do I need to enable ssl inspection to block https pages?I have tried with httpvshttps.com for example and I can block the http version but not the https version

HA active/passive OSPF design

Hi, Following topology is from PAN's design guide for A/P OSPF setup.I wonder if it brings any benefit to connect firewall1 to Edge Router B andFirewall 2 to Edge Router A with additional cabling run OSPF there too. The only thing I can see is that there won't be a firewall failover but routing protocolwill re-route the traffic via RouterB i...

Allow Teamviewer both inbound and outbound

HiIn PAN-OS FW we have user based authentication enabled. Now i found teamviewer is not working. I have allowed PORT 5938, 80 & 443. Thanks..

Resolved! Pushing from Panorama to firewall with API

I am trying to commit changes to a Panorama and then have changes pushed to the firewall making API calls from a powershell script. Using the API I can:add the firewall to the panoramaadd the firewall to an existing template in the panoramacreate a new device group on the panorama and add the firewall to itAdd rules (policies) to the device grou...

Assigning security profile to multiple security rules

Hi, when you have 100-200 security rule and need to assign a threat security profile to all the rules, what do you do?Does anyone know an easy way of doing it? I can either script it via XML API but there should be an easier way I think. thanks.

Resolved! Security Profiles?

The Threat log records events from which security profiles?

Best practice wise, which ports do we open on our AWS instance for our TRAPS ESM Server?

Best practice wise, which ports do we open on our AWS instance for our TRAPS ESM Server? We currently have SQL and HTTP opened with Security groups in AWS for our two offices. This of course doesnt allow users in the field to get TRAPS updates unless they are on the VPN. Trying to get ideas on what to open. Our concern is that if the server is r...

Custom Category block per default

Hi When I create a custom URL Category, it is automatically added to all URL profiles with action set to "none".Can I set this default action to "block" - that means, the new URL category will be automatically added to all URL profiles with action set to "block" ? Thanks and Regards,RJ

GlobalProtect - Authenticating using trusted domain credentials

My company has recently configured Active Directory/Windows Domain Trust between ourselves and another domain (we have recently merged as a company). Our users currently authenticate to GlobalProtect using LDAP linked to our domain controllers. Is it possible for me to have users from the other domain authenticate using their domain credentials ...

Forward Trust Certificate greyed out

HiI have an enterprised signed CA Certificate and also intermediate certificate. But when I install either of these, it shows that cert is valid but I cannot mark the check box for Forward Trust Certificate. It is greyed out. I can only add self signed cert as a forward trust cert. Any idea what am I missing? BR,Rahul

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!