General Topics

Response Pages pushed with Panorama

Hello- I am looking to push a custom response page out from Panorama to several PA-500's. As part of the configuration of the response page, there is an HTML file that I am uploading to Panorama. Can someone tell me if the HTML file can be copied out to the PA-500's as part of the commit process originating from Panorama? I have basically conf...

Alerts: - Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)

Hello Friends Our XDR system recently reported a lot of these warnings, "Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)". Through information from XDR from the user's computer that has queried a website through Google Chrome or MS Edge. The investigation activity gets the user's access information tha...

Factory reset on a PA-3220 that was part of an HA cluster

I have been working with Palo Alto support on our passive PA-3220, which can no longer boot up successfully. Power cycling the device doesn’t bring it back; it just keeps rebooting until eventually it ends up in maintenance mode. Palo Alto recommends performing a factory reset on the device and then restoring the device from a backup configurati...

Resolved! Software

Hello, We are currently using a Palo Alto PA-1410 running on software version 11.2.3. However, when we check for updates, the only version available is 11.1.4-h7, as attached. The Apps.Threats update is working correctly. Could you please let us know if this is normal, or if there is something we need to do to address this? Thank you for your ...

CLI: setting and unsetting log forwarding

Good day, So i figured out how to set the log forwarding via CLI: configure>set rulebase security rules "TESTING2" log-setting ANTAREX-LOG-FORWARDING but how do i change it back to None? tia

Resolved! sorting question

How do I remove the sort by ascending/descending in tabs like vulnerability protection profile and in URL categories, I recently accidentally activated these features and they are quite annoying. previously the Custom URL category allow/block list was in a chronological order of when I added them to the list, now they are in alphabetical orde...

How to add palo to multiple device groups

I am deploying two new firewalls. I have clone the existing templates and created new template stacks. I am not adding the firewall to the correct device groups and they have two VRFs in use. The old firewalls are detailed as YGC-FW1 and 2. The new are YGC-Palo-DC1 and 2. I have added the new to one of the new VRF groups but now I am unable to a...

system resources snmp monitoring

Hello, We have sometimes occurencies of network outage because of particular trafic that leads to high load on packet descriptor and packet buffer on our PaloAlto PA-5220. We would like to snmp monitor the following values from the output of CLI command : show running resource-monitor packet descriptor (on-chip)packet buffer By using a monitorin...

SSL TLS

Can A Secured SSL And TLS Encryped Virtual Casino Can Be Decrypt To Get Any Sort Of Information Looking Throught

Resolved! PA-220 won’t get IP from ISP.

Hey, all. I have a PA-220 that I am trying to setup on my network. I connected it up and set up the layer 3 on it, then turned my router into an AP and lost all connectivity. Currently I have it connected to my modem on ethernet1/1, and As it is a residential connection obviously my IP is dynamic. I followed the dynamic configuration instruction...

Stop wsc files

Hi I know WSC is not on panos file types encoder list. My question is, how can i lower down download risk by using custom url filtering? How can i stop for example: Https://www.c.com/download/*.wsc?

Customer Support Portal error

Receiving attached errors when attempting to access the Knowledge Base articles under "Resources"

syslog-ng 3.5.4.1 failure on boot

Hi, We have integrated syslog-ng 3.5.4.1 on a client machine which sends logs to server which is running syslog-ng 3.16.1, some times, I see below error at the boot up of our targetsyslog-ng[1762]: Error opening control socket, bind() failed; socket='/var/lib/syslog-ng/syslog-ng.ctl', error='Permission denied (13)'and logs will not be sent to th...

VPN Cisco concentrator/ISE - USER-ID log to PA

USER-ID log from VPN Cisco concentrator Dear Live community, how is everything going ? Have you ever had to do the following? We have to integrate a Cisco ASA, with Palo Alto, so that the PA receives from a Cisco ASA and/or Cisco ISE the users to be able to have mapper with USER-ID the users that connect by VPN. ( There is no global protec...

Resolved! HA Firewall Device Migration/Hardware Swap

Need to replace an HA pair of Panorama managed, currently deployed firewalls (PA-5220s) with a different pair of Panorama managed firewalls (also PA-5220s), with minimum/no downtime; device licensing is different between #1 & #2 pairs, necessitating the swap. Proposed procedure (detailed in attached picture)- Copy Panorama DG/Template for H...

Discussions

Response Pages pushed with Panorama

Alerts: - Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)