General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! New feature with active TP license

Hello,

We have a VM-100 Palo Alto at version 7.1.12 and we are looking to use the Palo Alto pre-defined Block lists.

The current Threat Protection license is using version 8001-4627 (04/06/18) however the 2 pre-defined lists are not displaying in t

...

Resolved! dmz design

Hi,

What is the benefit of having DMZ setup with two firewalls.

If we have dmz setup with two firewalls ( I don't know this design is valid and adopted design, I found it in the net )

If this is a valid design ,From local lan how the traffic flow

...

commit status warning on rules that are working the way I want them too

I have a rule that has webex enabled but dones not have ssl enabled and i keep getting a warning on that rule when i commit that says "Applicaiton 'webex-desktop-sharing requires ssl be allowed? But I don't want to allow ssl, so how can I get rid of

...

Enforce Connection for Network Access

I want to see traffic over GP. In my understanding GP Portal configuration Enforce Connection for Network Access is Force networt traffic via Portal IP. But it connected and not traffic registered under PA.

ASA 5510 VPN

I want to replace a IKE1 VPN serviced by a ASA 5510 with a IKE2 VPN serviced by the palo alto what i the best approach?

Cisco SFP+ Twinax Copper Cables to PA-5050

Hello.

Has anyone tried connecting Cisco SFP+ Twinax Copper Cables (sfp-h10gb-cu1m) to PA-5050 device? I've tried to find some info about it on PA KB but wasn't successful. Is there any document issued by PA listing all the supported 3rd party devices

...

Hub and Spoke IPsec VPN design with Dynamic Routing

Looking to properly setup Dynamic Routing over a hub and spoke IPsec VPN network. The hub will have 40-50 spokes. The Hub is running a PA-820. Spokes will be PA-220. Voice and data traffic. There will be minimal traffic between spokes. My questi

...

Global protect users dont pass authentication

Hello all

we have PA in production.The problem is VPN users dont pass by certain authentication profile.The issue is that when we point user it is ok but when we point some group it fails to authenticate

we test through CLI and that is result

test auth

...

Very Slow Commits

Anyone who's used Palo's since the early days may roll their eyes at this question..!

We have a bunch of 3020's and one can take an age to perform commits; for example this morning we performed 4 - the first 2 took <30 seconds, the 3rd took >10 minut

...

UserID Reporting Computer Names

Quick question.

We are having some issues where a users' computer name i.e. acme\pc01$ is being reported by UserID rather than the user i.e. acme\jbloggs.

Anyone seen this before and\or advice what it could be?

We have a horendously complicated UserI

...

Kerberos SSO with Globalprotect and User-Logon

Hi Community,

I have a strange problem with Kerberos SSO and Globalprotect 4.0.7:

I set up Kerberos SSO and the SSO is working.

If you connect to the Globalprotect-Portal via browser, you directly get a Kerberos ticket and the SSO works.

If you logout

...

Resolved! virutal router and ipsec settings for vsys admin

Dear All,

We created a seprate vsys and assigned l3 interfaces and virtual router for a vsys. But vsys admin which is assigned for it is unable to view virutal router tabs and ipsec configuration tabs.

We want this vsys should be handle

...

Resolved! PAN OS 7.1 Dynamic Scheduled Update Failing

Hi Everyone,

I have recently started to help a team support our Palo Alto's and was tasked to get our Panorama Server to push dynamic updates out to our Firewalls (PA 3050). Originally we had the individual firewalls setup to update themselves, but w

...

Resolved! Wildfire API

i am working on paloalto VM version 5.0.6 and tying to read reports from wildfire with the help of API using cURL.

i am pulling the report on the basis of "device_id" and "report_id" but getting error.

curl -i -k -F device_id=[SERIAL NUMBER] -F report_

...

Resolved! General Interface status?

Hi folks,

We have a PA-200 over in London (on the recall list) that get complaints that the internet has intermittent connectivity issues.

Everytime I login to it, the interface (1/1) is up, green, and no indication of a problem.

Other than contacting

...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!