General Topics

Discussions

Sorted by:

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Global Protect config problem: The server certificate is invalid.

Hello,

we are not able to connect to one of our Gateways anymore. We get the error: The server certificate is invalid.

I checked the following but this looks correct:

Incorrect time settings on the firewall.
Check the certificate's validation date

...

blocking unknow tcp and udp

The 2017 Palo alto networks best practices recommends blacklisting/blocking unknow-tcp and udp, my first thought is has something changed since this article ?

https://live.paloaltonetworks.com/t5/Management-Articles/Pro-Tips-Unknown-Applications/ta-p/

...

Resolved! Is EDU 110 Training free?

I see that there are a few posts about similar training (EDU 101) being free, but I wanted some clarification on the other self paced training options. I'm a Palo Alto customer, and I see that I have access to "activate" a large number of training co

...

Resolved! Troubleshooting GlobalProtect

PA220, 8.1.1, GPClient 4.1.1, GP license activated.

Connecting to the GPportal/gateway works fine. Traffic routes as expected.
We're still testing, so access is severly limited and policies wide open once connected. Literally, everything is allowed f

...

SSLMGR certificate ocsp verification failed.Certificate status unavailble

I'm getting the following error while I can reacht the OCSP server....

SSLMGR certificate ocsp verification failed.Certificate 5200000D638821F4E9A6409C10000400000D63 status is unavailable

> debug sslmgr view ocsp all

Current time is: Fri Jun 8 08:33

...

Resolved! Filter for multiple subnets

My filter is not working, can you tell me why?

((addr.src notin '172.0.0.0/8') or ( addr.src notin 10.0.0.0/8 )) and ((addr.src notin '180.0.0.0/8') or ( addr.src notin 100.0.0.0/8 ) or ( addr.src notin 200.0.0.0/8 ))

or for easier reading;

...

Resolved! MineMeld for importing STIX XML files

Hey guys,

I hope you are all doing great.

Its my first touch to both STIX XML files and MindMeld, so I was hoping to get a shed of light with at least if it is possible?

I am trying to find a way to import manually a STIX file (which I have attac

...

Resolved! can anyone direct me to the download for the user identification agent?

can anyone direct me to the download for the user identification agent?

Resolved! Cannot Ping Default Gateway

Hi Team,

I am trying to set up a lab. I have configured PA and set up a client machine. But I have configured client machine and provided the IP address in the same subnet as one of PA's interface. Even after doing so, I am not able to ping default g

...