General Topics

Resolved! Downloaded Firmware from Active Firewall doesn't show up on Passive - PA-460

Hi, I have downloaded a software release from Active Firewall and already sync to HA Peer, but when we tried to upgrade Passive Firewall. The downloaded version doesn’t show up. I have also tried uploading the software release manually but it showed the software already exist. What else should I check on this? Thanks

Admin console unreachable/cant remote in or ping - PA support wont let you submit a ticket without a TSF file - which you get via admin console

Very frustrated with this - PA portal requires a TSF file to submit a ticket. We cant generate one, because our portal is unresponsive. Tried calling and going through telephone support and it redirects to portal support and hangs up. Anyone have a number to a real person?

Issue GP Linux - URL Browsers

Hi, I am experimenting a very strange behaviour with Global Protect when connecting to my work from my home. I am able to connect to the VPN of my work and even doing ssh to the server in the private network, but when I try to surf the web, the browser does not show anything. When I disconnect from the VPN, I am not able to connect to the serv...

Resolved! Disable VPN services: Portals and Gateways

Hi Guys, I am newbie with PAN world. My Company don't use VPN. And I just want to disable VPN service. I my PA i see Portals and Gateway have been config. - Portals: I already disable login page - Gateways: Don't change anything. My way to disable VPN is right or wrong. Do I need to remove all setting on Portal and Gateways to make sure VPN al...

Response Pages pushed with Panorama

Hello- I am looking to push a custom response page out from Panorama to several PA-500's. As part of the configuration of the response page, there is an HTML file that I am uploading to Panorama. Can someone tell me if the HTML file can be copied out to the PA-500's as part of the commit process originating from Panorama? I have basically conf...

Alerts: - Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)

Hello Friends Our XDR system recently reported a lot of these warnings, "Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)". Through information from XDR from the user's computer that has queried a website through Google Chrome or MS Edge. The investigation activity gets the user's access information tha...

Factory reset on a PA-3220 that was part of an HA cluster

I have been working with Palo Alto support on our passive PA-3220, which can no longer boot up successfully. Power cycling the device doesn’t bring it back; it just keeps rebooting until eventually it ends up in maintenance mode. Palo Alto recommends performing a factory reset on the device and then restoring the device from a backup configurati...

Resolved! Software

Hello, We are currently using a Palo Alto PA-1410 running on software version 11.2.3. However, when we check for updates, the only version available is 11.1.4-h7, as attached. The Apps.Threats update is working correctly. Could you please let us know if this is normal, or if there is something we need to do to address this? Thank you for your ...

CLI: setting and unsetting log forwarding

Good day, So i figured out how to set the log forwarding via CLI: configure>set rulebase security rules "TESTING2" log-setting ANTAREX-LOG-FORWARDING but how do i change it back to None? tia

Resolved! sorting question

How do I remove the sort by ascending/descending in tabs like vulnerability protection profile and in URL categories, I recently accidentally activated these features and they are quite annoying. previously the Custom URL category allow/block list was in a chronological order of when I added them to the list, now they are in alphabetical orde...

How to add palo to multiple device groups

I am deploying two new firewalls. I have clone the existing templates and created new template stacks. I am not adding the firewall to the correct device groups and they have two VRFs in use. The old firewalls are detailed as YGC-FW1 and 2. The new are YGC-Palo-DC1 and 2. I have added the new to one of the new VRF groups but now I am unable to a...

system resources snmp monitoring

Hello, We have sometimes occurencies of network outage because of particular trafic that leads to high load on packet descriptor and packet buffer on our PaloAlto PA-5220. We would like to snmp monitor the following values from the output of CLI command : show running resource-monitor packet descriptor (on-chip)packet buffer By using a monitorin...

SSL TLS

Can A Secured SSL And TLS Encryped Virtual Casino Can Be Decrypt To Get Any Sort Of Information Looking Throught

Resolved! PA-220 won’t get IP from ISP.

Hey, all. I have a PA-220 that I am trying to setup on my network. I connected it up and set up the layer 3 on it, then turned my router into an AP and lost all connectivity. Currently I have it connected to my modem on ethernet1/1, and As it is a residential connection obviously my IP is dynamic. I followed the dynamic configuration instruction...

Stop wsc files

Hi I know WSC is not on panos file types encoder list. My question is, how can i lower down download risk by using custom url filtering? How can i stop for example: Https://www.c.com/download/*.wsc?