General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

Vulnerability Scanning

My requestors wants to perform Vulnerability scanning on the Palo Alto firewall devices and they want to whitelist the Qualys devices residing on ON-Prem. So my question is do i need to create security rule or make modifications to vunerability or allow those scanners on the management interface?They provided me the scanner IP's that they wan to...

Resolved! Customize User-ID Display

Is it possible to change how usernames are displayed in the Monitor tab? Our samAccountNames are rather cryptic and it would be nice to be able to view them by the displayName field instead.

Resolved! Cannot export FW device config from Panorama

Hello, We are trying to push the device config bundle to the first firewall in the HA pair, which I’ve successfully imported the configuration for. However, getting error message below when trying to 'Push to Commit' or 'Export' from Panorama.Note the configuration itself it very small – there are no security policies and less than 20 objects. ...

Resolved! Urgent - Port Block Help

Hi All, we are trying to implement a security profile to block port 445. Universal, source any/any, dest any/any, application unchecked, service port 445.The profile is near the top of the list of profiles (above the outbound traffic profile).For reasons unknown we are still seeing entries in the traffic log when we filter on:-( port.dst eq 445 ...

email change

Hi,How can I change my email address which is associated with live.paloaltonetworks.comThanks

Having GlobalProtect Users Access Webserver NAT Address Instead of Internal Address

I'm very very new to Palo Alto. For the few weeks that I've been using it, I've been very impressed with its ease of use, and functionality. I have a question when it comes to GlobalProtect. We have a webserver that we want to exclude from the GlobalProtect VPN tunnel. Let's say the site is test.testcompany.com. In the Client settings, in G...

Resolved! Ports Used by Palo Alto to Integrate Cisco ISE for Radius Authentication

Just posting today to request confirmation on which ports are required to allow Radius communication for authentication (only), between Panorama and Cisco ISE. Panorama ------------------- FWs--------------------Cisco ISE Which ports to open up on FW sitting in the middle?, I'm reading UDP 1812 though there's a part of me which suspects there c...

FYI: PAN-OS 8.1/New Hardware Announced

Check HERE for all the cool new features available within 8.1.0 and information on the brand-new PA-3200 series and the ruggerdized PA-220R.

DoS & Zone with no downtime

I watched a webinar on DoS protection the other day and they brought up a good point that I want to know if it is possible on the PA. They mentioned that setting up DoS can mittigate the DoS attach but allow interupt system availability, "throwing the baby out with the bath water". How can I have a proactive response? stop it before it inter...

Palo Alto upgrade to 8.0.7 broken?

Hi, PA-3020. Had a customer upgrading from 8.0.4 to 8.0.7 and, after upgrading, autocommit failed with the message: "Failed to find address US"; "Unknown address US"; "Failed to parse security policy", where US is a default region object used in the security policy. There are no customer objects created in the Objects -> Regions section.Chec...

Problem with TELEGRAM voice calls

HelloThere is a problem with telegramm application. The voice packets dont work but we can chat throught the app

Deploy FW cluter as VPN Concentrators

I am deploying two Palo Alto firewalls as VPN Concentrators, with an HA cluster of Palo firewalls that execute as Perimentral FWs of the network with Internet that are already in production. I would like to know if there is Best Practice for this type of architecture. My question if this cluster of VPN concentrators should be on top of the other...

Resolved! CLI command to view interface configuration

Hi All, I am trying to query a FW configuration from script using CLI.Is there a CLI command that shows a particular interface configuration ? Thank you.

Resolved! Clientless VPN 404 error

Hi I am experiencing some issues with Clientless VPN feature on 8.0.0.I get the login page and then I can log in succesfully. I have made an app to web gui of PAN and web gui of my access point.The only thing that happens is a page with 404 error on it. I have turned off zone Protection, and the latest dynamic update for Clientless VPN is instal...

Resolved! Software Question

Tough luck on getting the response to this but here goes, anyone who has a computer repair shop any recommendation on the software to keep track on things?

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!