General Topics

Threat Vector, a Unit 42 Podcast, is Now on LIVEcommunity!

We have some exciting community news to share: Threat Vector, a Unit 42 podcast, is now on LIVEcommunity!

Threat Vector is your compass in the world of cyberthreats. Listen to this biweekly podcast to learn about unique threat intelligence, cutting

...

How and Why to Accept a Solution to Your Post

Did you know that you can help your fellow community members by accepting solutions when a reply answers your question. Accepted solutions are a super-helpful resource in the community, and we want to make sure our members understand how this feature

...

Can I make PA3020 stop advertising default route in OSPF if its internet connection is down?

Hi all,

This my first post on here.

I was trying to see if these devices have monitor/tracking features e.g. keep testing the internet connection to see if it is still up.

I want the PA to form a neighbor relationship with a cisco router and advertis

...

installing SFP modules on PA-5050

Hi I need to know the correct procedure for installing a 10 G SFP into a PA-5050.

Can I install while they are on and running? Do I need a reboot?

Do I have to power off and install and power on?

I’ve tried to if an answer in the documentation

Resolved! GlobalProtect behind NAT/PAT Cetificate Issue.

Hi,

I'm configuring my GlobalProtect VPN and Agent keep saying "CN name mismatch".

Here's my infrastructure :

The PA220 is behind the NAT of the ISP and all connexions on WAN_IP (that is the public IP) are translated to the address 192.168.7.1. As po

...

How to block Google Drive when Using Chrome-cached Session in Palo Alto Firewall

Hi Guys, Any idea how to block Google drive Using Chrome-cached Session they can access the drive. We tried creating a policy by application blocking google-docs-base google-docs-editing google-docs-enterprise google-docs-uploading google-docs google...

Resolved! Question on GlobalProtect access route

Hi All,

I've successfully set up globalprotect for my remote users according to this link https://live.paloaltonetworks.com/t5/Configuration-Articles/Basic-GlobalProtect-Configuration-with-User-logon/ta-p/136099

I have a new problem. I want some user

...

Device Config Import into Panorama removes all the objects

We have firewalls in HA and are multi-vsys. I am trying to to get them into Panorama, but as i import the config it removes almost all objects and Panorama device groups only shows shared objects. Any object that was local to to vsys does not show an

...

Resolved! How many classified website on PAN-DB?

Hi There,

I have a customer RFP requiring that URL filtering product must have more that 50 million clissified webiste on its database.

Does Palo Alto Networks URL Filtering solution (PAN-DB) have more than 50 Million classified webistes?

Thanks ver

...

Panorama Merge or migration

Hello,

I do have 2 Panorama running with 7.1.9. 1 running with M100 physical and another one is VM. Both are having different device group , templete and devices.

I am looking for way to migrate all devices from M100 to VM. Is there any easiest/ safe

...

Resolved! syslog alerting in PAN-OS

There is an option for syslog alerting by email in PAN-OS , but even if used only for threats , not traffic, results in way too many emails. I am collecting threat events through Logstash into time series database InfluxDB . My very small program is

...

Multiple LDAP servers in a single profile - behavior

Dear comm,

when I have several LDAP servers in a profile for user authentication. How is this list utilized? Is only the first entry used? Are authentication requests distributed over all configured servers? How does it work?

Kind regards,

Rene