General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

input logs firawall

Hi, is it possible to add information imported from another event log to the logs of a Palo Alto firewall?

Resolved! Warning certificate chain not correctly formed in certificate

Hello All

I have imported a cerfificate into the PA as a PFX. I have also import the intermediate certs and root CA. The cert is signed by Go Daddy with 2 intermediate certs and a Root CA.

All imports fine, but when I get up global protect portal and

...

HA upgrade oddness (no preempt)

Hello,

just seeing if anyone has an explanation or has experienced this before.

I followed the HA firewall upgrade guide and experienced this unexpected behavior.

i suspended the primary, ( secondary went active), installed the new os, and rebooted.

...

Possible NAT issue on a PA-3260

Folks, I am trying to configure a NAT policy which should be bi-directional. Here the traffic can be initiated from outside or the inside. The policy is configured and I can see NAT hits. However, this policy does not work.

The NAT IP is from a sub

...

Resolved! Panorama Software Upgrade

Hi All,

Just wanted to confirm I have the process right.

We're running Panorama, M-100 appliance (32GB RAM), managing 3 pairs (6 no) of PA-3220 firewalls.

All currently running PAN-OS 8.1.5. Looking to upgrade to the next major stable release, curren

...

API for Code Repo

Hey, can anyone tell me the API to fetch the code repositories?
Earlier I used to use this : https://<console>/api/v1/coderepos?id=<reponame>
But now it's not working. Can someone please help me out with the same.

Thank you

Captive portal authentication over TLS

Hi, I've enabled captive portal on our systems, following the PA docs (Configure Authentication Portal (paloaltonetworks.com)). I have an SSL/TLS profile created with a valid, trusted certificate signed by our own internal CA. When our machines try t

...

Redundancy for Global protect VPN

Dear Friends,

We have a customer who is Currently configured with GP- Global Protect for VPN is connecting with ISP-1, one Public IP / One ISP-Internet Service Provider.

Requirement is, can we configure as backup or as redundant with another ISP-2

...

Resolved! How can I get a domain removed from the DNS Sinkhole parked domains list?

Hello!

I have purchased a domain that was previously parked. Unfortunately, DNS queries for this domain are getting intercepted by DNS Sinkhole.

Is there a process for getting a domain removed from the parked domains list?

Thanks.

Prisma Cloud: Azure Active Directory resources not being ingested

I have provided Prisma Cloud with all the necessary API Permissions and more, along with granting the necessary roles needed to view Azure Active Directory Security Settings. The issue lies in resources showing up in Prisma Cloud itself when queried,

...

Add disk collector panorama (missing)

Hi,

We are trying to add a new disk in collector (panorama). We follow the correct procedure and we can see the disk running: show system disk details. This is the disk:

Name : sdh
State : Present
Size : 2097152 MB
Status : Available
Reason : Ad

...

User-ID - Windows Server 2022 , not working

We are running a Windows server 2022 and PA-3220. I have the user-agent put on a seperate Win 2022 server. The firewall when communicating with server is getting dropped code 5986. Under my Server Monitoring it shows Connection refused(0).

Resolved! DHCP Relay for GlobalProtect

I'm trying to setup globalprotect where once a user successfully logs in, they pull an IP from our dedicated, internal DHCP server with all the DHCP options. So essentially, setup Palo Alto for a DHCP relay for the GlobalProtect clients. I was trying

...

Resolved! CVE-2024-0010

Hi there everyone.

Could please someone clarify for me what versions are affected regarding CVE-2024-0010 as seen here?

https://security.paloaltonetworks.com/CVE-2024-0010

My inquiry goes for version 10.1.11-h5. Is it affected or not? Because I belie

...

Resolved! SSL/TLS Vulnerabilities

Dear Team ,

We have a customer, who found SSL/TLS Vulnerabilities on audit SSL/TLS configuration The firewall supports weak cipher mode CBC.

kindly provide the solution to remediate the weakness.

snip attached for Refr.