This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Activating Trial license to extend PaloAlto working environment

Hi, community Does anyone has any experience Activating "Trial Licenses"? If let's say our support for PA-FW ends in 10 days and we would like to extend working-period is it possible to use "Trial Licenses"? I know we can use them only once, but we don't know if we can use them before the official support-end to extend them for trial period? If ...

Port Hopping - Is it for defence or Attack ?

I was just going through Tactics, Techniques, and Procedures (TTPs) and saw port hopping and still confused is it for defence or attack. If port keeps changing randomly then how would the connection stay connected?. Please share any article that explains clearly about port hopping or any easy way to understand. #Portmapping #CybersecurityFun...

cryptographic secure erase with NIST 800-88 guidelines

Query: We would like to know if PA firewalls have cryptographic secure erase that complies with NIST 800-88 guidelines. Ref: https://www.stellarinfo.co.in/bitraser/ppc/nist-compliant-data-erasure-software.php?gad_source=1&gclid=Cj0KCQjwsoe5BhDiARIsAOXVoUvVnCf6oEs40k5Qm5ACFgn4UdUirA047WSY2tdQm7R08taWwhYo69UaAlTUEALw_wcB

User-ID Agent Timeout Triggering

I'm going through implementing a special 'modified' SP800-171R2 control list and I believe I can achieve satisfying controls such as 3.13.9 "user session timeout/terminate external access etc etc" control with the UID timeout function. If I tied external internet access to a security group in my AD and granted users membership to that group, t...

RH747 by • L2 Linker
  • 3536 Views
  • 2 replies
  • 0 Likes

Facebook Chat Still Active even After Adding Application "facebook-base"

Hi, I am new to Palo Alto and I started learning with watching Keith Barker's PA videos. In a video he configured security policies and demonstrated that he can't use Facebook chat with that configuration. I didn't want to do the exact same thing and in my lab a virtual PC can use Facebook chat. I did not understand why. Please explain with dumm...

User ID Redistribution

Hi, There seems to be an issue with our internal Palo firewalls and their Data redistribution, I'm not sure how long it's been an issue. What it should do is redistribute the user authentication events to every firewall so it can use that us the user id in the firewall policy, but this isn't happening. User ID isn't showing across firewalls, lik...

OCI PA vm unable to communicate outside

Hi, I am a newbie for PA and need of some assistance in configuring PA VM on OCI. I have done the basic configuration Created Zones and Virtual routes etc. I need to create a IPSec VPN from OCI PA VM to OCI VPN (Not a PA VM) setup on a another tenancy. Both configuration identical except for IP address. Added rules to allow all and a NAT tow...

one of the user unable to receive Email from support team

Hello, I am the user mentioned in the title. My email address is email@domain, and I am using it through Outlook. I am able to receive emails such as release notes and update notifications for various content without issues. However, I am unable to receive emails that I am directly referenced on for cases, and these messages are not being cate...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members, Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global community. We also want to take this opportunity to remind members that they have the authority to repo...

safe-community_oct24.jpg
report-content.jpg
jforsythe by • Community Team Member
  • 1165 Views
  • 0 replies
  • 2 Likes

AI-ops BPA is not giving correct results after techsupport file analysis

Hi, After my Palo account manager encouraged me to use the AI-Ops page, I uploaded the most recent techsupport file and carried out an on-demand BPA. Some of the findings / recommendations are already done within our box. For eg: it says to ensure the Palo Malicious address list (EDL) should be included in outgoing and incoming rules as Deny. t...

User-ID Self-Signed Certificate expire with local users

Hello,I have an important question regarding User-ID Self-Signed Certificate expires on 18 NOV 2024 https://live.paloaltonetworks.com/t5/customer-advisories/update-to-additional-pan-os-certificate-expirations-and-new/ta-p/572158 What I understood this regarding User-ID if I have LDAP or DC for authentication but in my Palo Alto I'm using on...

Zurattos by • L1 Bithead
  • 2183 Views
  • 1 replies
  • 0 Likes
  • 24427 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks