General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Facebook Chat Still Active even After Adding Application "facebook-base"

Hi, I am new to Palo Alto and I started learning with watching Keith Barker's PA videos. In a video he configured security policies and demonstrated that he can't use Facebook chat with that configuration. I didn't want to do the exact same thing and in my lab a virtual PC can use Facebook chat. I did not understand why. Please explain with dumm...

User ID Redistribution

Hi, There seems to be an issue with our internal Palo firewalls and their Data redistribution, I'm not sure how long it's been an issue. What it should do is redistribute the user authentication events to every firewall so it can use that us the user id in the firewall policy, but this isn't happening. User ID isn't showing across firewalls, lik...

Protocol Confirmation Required for Industrial Firewalls IEEE C37.94

Can somebody confrim if palo alo firewalls supports these protocols "IEEE C37.94 or not need solid answer for industrial firewalls???

OCI PA vm unable to communicate outside

Hi, I am a newbie for PA and need of some assistance in configuring PA VM on OCI. I have done the basic configuration Created Zones and Virtual routes etc. I need to create a IPSec VPN from OCI PA VM to OCI VPN (Not a PA VM) setup on a another tenancy. Both configuration identical except for IP address. Added rules to allow all and a NAT tow...

Unable to use IPV6 in VM series NGFW which is hosted in AWS Envirement

Hello Team, Need help to set up an IPv6 for VM series NGFW which is hosted in AWS env. We are able to see the IPV6 traffic on NGFW, getting Aged out logs for the IPV6 traffic. rules are present in NGFW to process the IPV6 traffic.

one of the user unable to receive Email from support team

Hello, I am the user mentioned in the title. My email address is email@domain, and I am using it through Outlook. I am able to receive emails such as release notes and update notifications for various content without issues. However, I am unable to receive emails that I am directly referenced on for cases, and these messages are not being cate...

ECCN for PA-5410

Hi Can you help me with US ECCN for PA-5410 please?

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members, Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global community. We also want to take this opportunity to remind members that they have the authority to repo...

AI-ops BPA is not giving correct results after techsupport file analysis

Hi, After my Palo account manager encouraged me to use the AI-Ops page, I uploaded the most recent techsupport file and carried out an on-demand BPA. Some of the findings / recommendations are already done within our box. For eg: it says to ensure the Palo Malicious address list (EDL) should be included in outgoing and incoming rules as Deny. t...

User-ID Self-Signed Certificate expire with local users

Hello,I have an important question regarding User-ID Self-Signed Certificate expires on 18 NOV 2024 https://live.paloaltonetworks.com/t5/customer-advisories/update-to-additional-pan-os-certificate-expirations-and-new/ta-p/572158 What I understood this regarding User-ID if I have LDAP or DC for authentication but in my Palo Alto I'm using on...

reconnaissance protection alert search

reconnaissance protection alert search We have alerts set up but I need to search for the alerts but what is the search string

Clean Firewall Policies

Hello all, I am thinking of how can i clean/organize my firewall policies. Many rules seem to be mixed up within each other. Do you have any suggestions to make it more appealing to the eye? How should I organize my rules?

A question about PAN-240612

Hi, I have a question about PAN-240612. ===== Fixed a kernel panic caused by a third-party issue ===== What feature does this issue relate to? And what exactly is “third-party”? BR

Resolved! How to configure gre over ipsec？

Hello For example, some implementations require multicast traffic to be encapsulated before IPSec encrypts it. If this is a requirement for your environment and the GRE tunnel and IPSec tunnel share the same IP address, Add GRE Encapsulation when you set up the IPSec tunnel.https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/gr...