General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! Wildfire API

i am working on paloalto VM version 5.0.6 and tying to read reports from wildfire with the help of API using cURL.

i am pulling the report on the basis of "device_id" and "report_id" but getting error.

curl -i -k -F device_id=[SERIAL NUMBER] -F report_

...

Resolved! General Interface status?

Hi folks,

We have a PA-200 over in London (on the recall list) that get complaints that the internet has intermittent connectivity issues.

Everytime I login to it, the interface (1/1) is up, green, and no indication of a problem.

Other than contacting

...

Customer trying to utilize Palo Alto to generate user activity reports that show detailed web browsing. I understand from other articles (https://www.paloaltonetworks.com/documentation/80/pan-os/pan-os/monitoring/view-and-manage-reports/gene

...

Resolved! Best Practice for HA1 IP address

I have a lots of customers who uses HA pair with 1.1.1.1/30 and 1.1.1.2/30 for HA1 port.

This HA1 port connected directly. And reason for selecting these IPs are because nobody was using it in the past.

Today, I read this article:

https://blog.cloudfla

...

Resolved! DNS not working

Hi There,

I am new to Palo Alto and we are currently simulating PA VM ESX-7.0.1. I try to implement DNS but though I have reachability to the DNS server (google DNS) my address resolution is not working as expected. Please find the snap below.

Than

...

Resolved! What is mean log .1 .old

Hi all, I would like to know about log cache example mp.log.1 or mp.log.old extension .1, old how it occurred and in this case usually with compromise or disk full

Global Protect IPSec/SSL

Hello,

If global protect fails to establish a IPSec tunnel and uses SSL instead, does it attempt to switch tunnel types if it sees it can do a IPSec tunnel or will it keep it's current tunnel type until the GP client get's refreshed and sees what con

...

URL Filtering with no block page

Is it possible to have URL filtering by category with just a quiet drop of traffic, no reset or block page? Basically I want to filter without people knowing I am filtering, they just can't connect to a bad website. I can't figure out how to do that;

...

Resolved! Identify Policy Deny Source

I am seeing some decrypted sessions hitting an allow rule, but the session end reason gets logged as a "policy-deny". Here is a screenshot of one example:

In the above example, rule "outbound" is configured as:

Source Zone: MSUN

Source Address: Any

Dest

...

Resolved! Authentication error Gprotect

Hi,

we have a cluster of PA5020 with PanOS 7.1.12. Yesterday we had a problem, the Global protect authentication was failing. So we failover the cluster and it worked again. Today this problem has happened again. Looking in bug we could be hitting th

...

Seek for help: Failure to use Global Protect VPN

I came into a problem for global protect VPN connection, could anyone please help me?

After installing of the GlobalProtect64.msi program(finished installtion), it didnot work on my computer(cannot establish connection, windows 8.1, 64 bits system).

...

Multi site dual-isp with redundant VPN connections: PBF vs alternatives?

When we got out PanOS firewalls a few years back, we set them up with a single virtual router and PBF to handle our active/passive ISPs.

Time went on, and to support fancier topologies, such as fully redundant VPN connections between us an AWS, we m

...

Computer wakes up

Hello,

My laptop which is couple of months ol runs win 10 is constantly turning on when in sleep mode. Any advice and what causes this?

Resolved! Educator at Heart - Jobs for trainers PCNSE certified?

About to take the PCNSE in a few weeks. I don't mind being a consultant, but I like training the most. Are there many jobs out there for PCNSE certified individuals interested in training, and if so where are they needed most? Also, what is the s

...

Resolved! PANOS 8.0.7 SSL inbound inspection affects SSLLabs scroe

Hi,

When we do SSL inbound inspection for some of our web servers, SSLLabs test scores goes from A+ to B. I also tested with "openssl s_client -connect mailadmin.artvin.edu.tr:443 -showcerts" and it show the same problem. The problem is, when doing s

...

Discussions