General Topics
Showing results for 
Search instead for 
Did you mean: 
General Topics


Thank You for Filling Out the LIVEcommunity Experience Survey!

If you've visited LIVEcommunity anytime recently, you've probably seen a pop-up asking for your feedback. We've deployed this survey since April 2020 for new and returning visitors alike as a way to gather feedback from our users. 


In the past six


jforsythe by Community Team Member
  • 1 replies

Resolved! IPSec tunnel rekeying

Hi all,


We are using tunnel monitor on the IPSec tunnels and i am wondering if rekeying childs SA, causes the tunnel monitor to bring the tunnel down. In additon i would like to know if PA stores a log of all the rekeys for each tunnel.



Issues with Global Protect and Post-vpn-connect

I've opened a ticket with Palo and haven't had much success.  I am trying get the drive mapping script to run and it gives me an error 1008.   Below are the logs for gpservice. Few things I have noticed and tried:

1)it is using my adminacct yet i am l


How to Convert Device Specific objects into Shared

Hi everyone,


Hope everyone is doing Great. 


I have one question regarding the shared objects and here is the problem I am facing.


I am trying to find the best way to convert device specific objects(addresses, services, tags) into shared objects. I wa


DNS Signature Lookup Timeout Error

I'm seeing quite a lot of messages logged in the syslog output from my PA VM-100 running PAN-OS 10.0.0:


Aug 19 07:31:29 firewall-1 1,2020/08/19 07:31:29,007051000047085,SYSTEM,general,2560,2020/08/19 07:31:29,,general,,0,0,general,medium,"DNS signatu...

Shutting down/disabling subinterfaces

I am very new to the PANOS world so I will apologize in advance if this is obvious, however my search of documentation and knowledebase did not yield anything. I have been looking for a way to administratively shut down sub interfaces. Is this possib


scourge by Not applicable
  • 9 replies

Resolved! How Palo alto HA and Cisco HSRP work together ?

How Palo alto HA and Cisco HSRP work together ?


For example 


Here Palo alto HA is upstream devices ( lets consider PA1 and PA2 are in HA setup). 

Cisco Switches are catalyst 6509 or nexus 5 or 6K ( SW1 and SW2)

SW1 is connected to PA 1 and SW


perumalj by L1 Bithead
  • 4 replies

Physical connections to vSphere cluster for VM-200

Hey folks,


Can someone point me to a "best practice" design guide or white paper for making the physical connections to a vSphere cluster that will run a VM-200 virtual appliance? I'm only seeing configuration guides on deploying and setting up the


markdean by L0 Member
  • 1 replies

2 subnets on the same interface

We current have 1 subnet linked to an layer 3 interface which is supplied by our isp. We have run out of ip addresses and our isp want to present another subnet but on a completely different range. (too many services to move to a new range)

Is it just


Resolved! API key too long

Hello all,


I am using the guide below to clear out UDP sessions after a PBF failover.  When I get to the part about the key parameter under Payload Format, it says the value is too long.  I am copying the exact key I generated from the web browser. 


ClintL by L2 Linker
  • 2 replies

Resolved! Panorama with log collectors

Here is the set up.  Palo FW HA pairs send logs to Panorama and Log Collectors.  Log Collectors send logs to long term archival (LTA) such as LogRhythm.


Here is the issue, long term storage is not seeing the latest logs.  I guess what I don't underst


Resolved! Releasing and reassigning VM-50 pa-vm license key

purchase a VM-50 lab bundle last year.  pa-vm license was "perpetual"
, while the other components were 1YR subscriptions.  Subscription expired on 7 October 2021.

the previously licensed was "destroyed"  ☹️ before it could be properly deactivated.  I


MAAXIT by L1 Bithead
  • 3 replies
Top Solution Authors