General Topics

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

🚀 Join us at Palo Alto Networks Headquarters for Ignite - November 14, 2024 🚀

Enterprises are embracing AI to revolutionize their operations, but with innovation comes new cybersecurity challenges. That’s why you can’t miss Ignite on Tour!

This event is your gateway to exploring how AI is transforming cyber defenses. Join us

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

WildFire not generating Incidents

We turned on WildFire this past evening and we are not seeing any WildFire submissions. We have setup a Profile that is looking for PE and PDF and it is applied to a few rules at the top of our security policy. Is there a reason why we wouldn't have

...

Resolved! Profile Settings needed when action is set to drop?

Hi,

When I configure a security rule and set the action to drop or deny, what sense does it make to configure Profile Settings?

From my point of view the traffic gets blocked before any Profile settings will be checked. Is this correct?

Best Regards,

D

...

How to Configure IPSec VPN

HI All ,

We have task of creating a site to site VPN in Palo Alto firewall with two remote peer one is primary and one is secondary having same encryption domain. Please tell below Queries

1. Process to make this VPN set up between primay and secon

...

User-ID for BYOD

Hello,

I tried to search for information on how to capture User-ID for BYOD using Ruckus WLC but couldn'd find usefull info? Can anyone point me in the right direction?

Thanks in advance.

~sK

Resolved! VM series and SR-IOV

Hi,

Is it possible to setup the VM series NICs as SR-IOV passthrough NICs, the main issues I see is you would need physical e1000 NIC driver support for the NIC card you are using inside the VM series kernel?

Just in case anybody asks why...latency

Che

...

Resolved! Disable URL filtering and category match block response page

Hi,

If someone wants to disable response page for specific feature, is it possible?

e.g.

Can we Disable URL filtering and category match block response page?

Thanks.

Regards,

Sachin

Resolved! Palo alto 3050 and Panorama

Hi,

we are deploying two Palo Alto 3050 physical firewalls in our datacenters and for log collection would like to install Panorama solution. Please if some can clarify the below,

1- Do I need two Panorama licenses to buy with firewalls?

2- Can we ins

...

SSL Decrypt Mirror VLAN Tagging

Hi,

Wanted to start tagging the traffic going out of the decrypt mirror into our fireeye appliance. I read somewhere that tagging the decrypted traffic into the fireeye is recommended because apparently the fireeye appliance may have an issue disting

...

Sufficient hardware for VM100 with 200MBit/s fiber access ?

Hi,

We have a Dell PowerEdge 2950 with 2x Quad Core 2.5GHz CPUs and 32Gb RAM.

It runs an empty 2012R2 Hyper-V.

Is this sufficient computing power to run a VM-100 with the above mentioned internet bandwidth..?

I just don't want to trash a well running

...

How to add/create local user password directly via CLI?

PA500, test unit running PANOS 3.1.4

When I enter a local user via the GUI, the corresponding XML in the configuration file is as follows:

    <local-user-database>
      <user>
        <entry name="testuser">
          <phash>$hashvalue$</phash>

...

Anyone have a fix for this issue? GP using WAN/LAN IP for some traffic

HI, Anyone have a fix for this issue? GP using WAN/LAN IP for some traffic https://live.paloaltonetworks.com/t5/Management-Articles/Wrong-Source-IP-from-GlobalProtect-User-in-Traffic-Logs/ta-p/57232/jump-to/first-unread-message Thanks

Resolved! Command line "show session all" limited to 1024 entries

First some information on the use case:

500 users
each user is generating approximately 10 simultaneous sessions => 5000 simultaneous sessions

I would like to get the amount of current sessions per user, from the command line.

I currently use the API to

...

Migrate PA-500 to PA-820

Hi,

I have a customer with a PA-500 cluster in version 6.0.3 out of support and has bought some new PA-820 that come with version 8.0.0.

As the PA-500 are not supported and I do not want to update them to version 8.0.0, is it possible to load the xml

...

How to recover Radius profile shared secret ?

Folks- Any idea how to recover shared secret of Radius profile which is set to verify and encrypt the connection between the firewall and the RADIUS server ?

Is there a more system:runnig config CLI command like Cisco in PAN firewalls which can he

...

Resolved! Policy Commit Failed

Hi All,

recently I have created an interface in Firewall which is managed by Panorama. Now after creating the interface, I am not able to push configuration on Firewall and getting below error. Can someone please help me?

Below is the error.

+++++++

...