General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

What version of SSL/TLS firewall use when connecting LDAP

What version of SSL/TLS firewall use when connecting to LDAP Server when we check the SSL checkbox

How to block additional file types?

Hello guys,

Can you please advise how we can restrict access to file types such are .vbs and .msi?

These types are not available in the File block list.

Kind Regards,

John

TI automation - architecture and hardening [part 1]

Hi everyone,

I'm Giovanni Mellini and I work in ENAV (Italian Air Traffic Control provider) Security dept.

One of the topics I've been working on over the last few months is threat intelligence‍ automation, or how to automatically integrate threat

...

FileZilla & SSL Decrypt

The auto-update feature in FileZilla will break if SSL Decryption is turned on in the firewall. The following URL must be excluded from decryption:

update.filezilla-project.org

Resolved! Panorama Virtual Appliance V.8

Hi Guys,

I wanna update our VM panorama currently running the v 7.1.10 to version 8.

my Panorama currently manages less than 10 Devices.

Could someone provide me with the requirements (like storage, CPU, RAMs) i need to consider?

P.S : Not having

...

what OS is PA built on

Does security management require alot of linux, unix and ubuntu knowledge and software?s

Resolved! Miner to collect AWS IP

I would like to setup a new Miner to collect AWS Ips from the following http://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html, using URL https://ip-ranges.amazonaws.com/ip-ranges.json. How would that be accomlished, I can't seem to locat

...

Resolved! Global Protect 4.0.2 -19 only connects with Windows Administrator Account

Hello everybody,

recently I am facing a strange Problem with Global Protect.

If I log into a Windows 7 Machine (64-bit) with an Administrator Account and enter Credentials of a NON-Administrative Account in Global Protect everything works just fine.

B

...

Resolved! Importing a WildCard SSL to use with GlobalProtect

Hi All,

Im trying to import a WildCard SSL to use for our Palo Alto GlobalProtect VPN. Im Having some trouble as this is my first time using SSL. I can import the WildCard but im not able to link it to its Root CA (GoDaddy). Do i have to have this si

...

DNS proxy to GP clients

DNS configured in GP settings: Primary DNS 10.250.1.1, secondary DNS 10.250.1.2

Access route: split tunnel- 10.250.0.0/16 allowed in GP.

Once clients are connected to globalprotect, they are getting the above DNS settings. so the traffic going to int

...

Resolved! GP Clientless VPN setup

Hi, i have a PA200 for a testing purposes i want to enable clientless VPN access. Went to Device/licences and i see i do have a licence enabled.

then going to Device/dynamic update i do have clientless software uploaded:

but when i try to activate it

...

How to download Panorama?

Can anyone redirect to the lkink to donwload Panorama?..can';t see it under Software Updates in support account.

URL Filtering of Active Sync

Hello

There is some problem concerning url filtering of Active Sync.we create url rule which must allow Active Sync but it doesnt work.we exclude this rule it is working.is there any particular configuration about Active Sync?

Resolved! Palo Alto global Protect setup issue

Hi All,

I'm currently trying to set up an SSL VPN using the global protect client on a Palo Alto FW.

I have:-

- issue a self signed root CA and CA to the palo

- set up VPN tunnel

- created VPN zone

- setup an authentication profile using RADIUS and directe

...

Resolved! Response pages not always presented to users

My response pages work when users attempt to browse to a blocked category but when the blocked item is buried within the page users just get a blank screen until the connection times out.

Any ideas or suggestions would be greatly appreciated!

Thanks!