General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Clientless VPN 404 error

Hi I am experiencing some issues with Clientless VPN feature on 8.0.0.

I get the login page and then I can log in succesfully. I have made an app to web gui of PAN and web gui of my access point.

The only thing that happens is a page with 404 error on

...

Resolved! Software Question

Tough luck on getting the response to this but here goes, anyone who has a computer repair shop any recommendation on the software to keep track on things?

Resolved! Export rules in Xcel sheet

Hello,

We need to export our FW rules into an excel sheet and then have a column that has a description of what the rule is for and who authorized it, what is the best and faster way of doing it ?

I tried following the link below and tried to export

...

Custom signature for unknown tcp

this is a capture from a tcp traffic.

i want to make a custom app id because in my log it say my application is an unknown-TCP application

how can i get the signature from the digits (image) ?

can someone thell me or give me tips how i should make a cu

...

VM-100, ESXi, Module 'CPUID' power on failed

Trying to get a VM100 to power on with an ESXi host.

This is a HP EliteDesk 800 G1 i5. I'm getting the message that Intel VT-x is available but it might be disabled. However, I know hyper threading is enabled in the HP Bios.

Tryig to run Palo 8.0.

...

Zones

Is it possible to use DG layering to solve DaaS Zone issue??

1. Can we create a DG-DaaS whose parent will be ‘DG-AWS_DQA’.
2. Assign Seattle DQT firewall to DG-AWS_DQA
3. Assign Ashburn n future Chicago to DG-DaaS (since it has DG-AWS_DQA as parent, it

...

Is it possible to use DG layering to solve DaaS Zone issue??

1. Can we create a DG-DaaS whose parent will be ‘DG-AWS_DQA’.
2. Assign Seattle DQT firewall to DG-AWS_DQA
3. Assign Ashburn n future Chicago to DG-DaaS (since it has DG-AWS_DQA as parent, it

...

IPSec Tunnel from vsys1 to vsys2

Hello All,

I have a design issue to mull over, and one of the options is to look at having ipsec tunnels between vsys isntances on the same box.

So, I have vsys1 as my default vr, what I may need to do is turn up vsys2 and have certain traffic in vsy

...

Resolved! Configure IPSec between Palo Alto devices

We have two vpn Palo Alto devices.

One in our HQ departement and one in a remote location.

I need to setup an IPSec VPN tunnel between these sites with the Palo Alto devices but I never did this before.

On the Palo Alto website I found this article whic

...

Rule base documentation

PA Best practice says you should have your rules documented on the rules and some where other than your rule base. Anyone doing that? and if so how

Last shutdown/restart date

Is there anyway to find out when a device was last shutdown?

Thanks,

Resolved! Redistributing Tunnel interface into OSPF no longer working

Hi,

I have a strange scenario here. To summarize, I had previously configured GlobalProtect on a Palo firewall and configured the Palo to redistribute that network range on the tunnel interface into OSPF. This worked without any problem.

Now, the IP a

...

Monthly Graph Reports (Pie&Line Charts)

Hi,

we have to build monthly PDF reports with nice graphs like Pie&Line Charts for the management. Unfortunately PDF summary reports are the only one which contain graphs (despite the ACC Widgets) and are generated only everyday. Is it possible to ge

...

Resolved! HA Sync with different Configuration

I have two firewalls previously on HA (Active-Passive mode). We had to shutdown the passive device due to some troubleshooting. Then we had to roll-back the config of the active PA.

Here's the current setup. (HA links not yet cabled)

Active PA - lower

...

User-ID Policy not being used

We have an agentless User-ID setup. Firewall is able to pull user accounts from the AD.

User-ID based policies were created on top of IP-Based policies.

However, some user traffic can be seen using the user-id based policies, some users can be seen us

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help