General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Video - Installing MineMeld on VMWare desktop

New video, about installing MineMeld on VMWare dekstop: https://paloaltonetworks.box.com/s/ke4ll5sc6b751czlconury05l99clggi (music by Eric Skiff)

Anyone know if the migration tool can split ASA Multi-context in seperate VSYSs on PAN?

Hi, Anyone know if the migration tool can split ASA Multi-context in seperate VSYSs on PAN? Thanks

MFA auth page not presenting instead I see basic Captive Portal web-form login

I have an odd issue where when I get the prompt from Global Protect saying "You have attempted to access a protected resource please click the link to authenticate" I am brought to the basic (not pretty) looking Captive Portal web-form login page and not the nice\fancy MFA login page. Does anyone have any ideas on this?

Output limit?

Hi,I run minemeld (standalone) in a virtual machine with 2 cpu, 6GB RAM and 40GB hd. My config has 63 miners (mainly youtube miners and ransomware trackers), 13 aggregators and 30 output nodes. The miners start the job, but when it reach the band "85k-95k indicators", the Minemeld stops mining. The miners get the status "started" and few of them...

Matching Dynamic IP

I hope the brilliant minds here can answer my question I have a situation where I need to change NAT to translate in a specific way, I am looking at how the PA's behavior specific to how it selects IP address in a NAT pool based on the mask. Here is the setupCompany A uses a public IP within their DMZ for sake of example Class A (4.0.0.0/8) add...

Resolved! External Dynamic List & URL Filtering

Hello all, I want to use an EDL to try to whitelist a group of approved sites for users and block all other sites. In URL Filtering, I have all other categories set to block, and just allowing the EDL. However, when a user tries to go to one of those sites (for example - *.lync.com), he is getting blocked and the category is showing as internet-...

Are Multiple Virtual Routers needed for BGP peering with multiple local AS numbers?

Hi everyone, I have a situation where a location has 2 MPLS circuits. On one MPLS circuit, the local ASN is 65136. On the other, the local ASN is 7014. Is it possible to peer with both providers using the same Virtual router, or would I need to create a seperate Virtual Router for each circuit? thanks! /Evan

Resolved! GP 4.1.0 released and....

I have not seen any chatter or mention of this but I tried the 4.1.0 GP client in a lab environment yesterday. The good:* The app is redesigned and looks really nice* You can now select from/add/remove multiple gateways! The bad:* It would not connect to the VPN even after a reboot and reinstall 😕 After going back to 4.0.7 everything worked aga...

Resolved! Web server publishing error

Hi! Help, please, with an Internal Web server publication. I have a PaloAltor PA-200, PanOS 7.0.19. I have ext. Internet on Eth1/1 (L3-Untrust zone) and LAN on Eth1/2 (L3-Trust zone). In my LAN I have a Server with Web publication (WebServer), which should be accessd from outside (Internet). I`m trying to publish it. But got an error: Mismatch o...

Palo Alto not loading certain valid sites, why?

Having another issue with these things (ready to throw them out the window in all honesty). Seems as though a couple sites simply won't load when routed through a pair of HA-3020s. Of course Palo Alto support does a packet capture and sees no drops so immediately not their fault. But I know it is because I can route that specific traffic out ...

Resolved! Are Application Filters in Groups an AND or an OR?

Hi all, If there are multiple application filters in an application group, do they work with AND or OR logic? For instance, someone configured an application group which contains five filters. All of the filters have "Subcategory = file-sharing." Then one filter has "Characteristic = Transfers Files," the second has "Tunnels other apps," the t...

HA Active/active vwire different location

Dear All, We want to deploy 2 firewall PAN in 2 different location (Building) but same area/complex. Is there any ideal distance for HA link for both firewall? Is it need to directly or i can use via switch? Can i deploy this topology? is there any suggest?

Resolved! 2593-3089 (04/27/18 -AV version won't install on secondary

Version 2593-3089 (04/27/18 shows downloaded but not installed and when I choose install nothing happens

Resolved! Traffic showing from wrong zone

Hello all, I have a (hopefully) simple problem I can't seem to figure out.I have recently created a new DMZ zone on my PA for guest users, but when a guest tries to access the internet, the traffic is showing as sourcing from the trust zone instead of the DMZ zone. A trace from the guest user makes it to the PA, then dies. I have the policy from...

Resolved! Windows and User-Mappings

I have a user group in Active Directory where we place users who should not reach the internet. This user group is then tied to a Palo Alto rule to Deny access.I've noticed (Windows PC) this week, that if a user who is in the Deny group logs in to a PC, they will be denied (works fine), however, lets say they log out and a person who should have...