General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

GlobalProtect Patch management Issue

Hi everyone,

We have a (HIP) check list of security requirements (joined domain, antivirus version etc… ) for our user machines must be comply with this list before our VPN user can access corporate servers.

We want to add Microsoft Patches (updates

...

MineMeld sudden_death...how does it work?

I need some help understanding the sudden_death behavior with a MineMeld miner/prototype.

From the documentation[1], I understand that sudden_death is designed to immediately age out indicators when they disappear from a feed.

Is it comparing the cur

...

PA-200 Pan OS 5 12 anyone with a config file?

I've about ripped out enough hairs no matter what config or method or video i try my setup doesnt work. I know its a check box or something.

I just want a basic/simple config

I'd like all ports 2/3/4 usable on same subnet with nat/dhcp

port 1.1 as wa

...

Resolved! Using PA-200 for home internet router?

Hello folks,

I recently bought a used PA-200 software version 6.1.4 for learning and testing purposes.

I replace my home Linksys with the PA-200 following this article to configure.

https://live.paloaltonetworks.com/t5/Configuration-Articles/Setting-U

...

Application & URL Filtering/ Blocking

Hi

I've been this question, and I'd assume we'd need to block under both but I just want to make sure.

If we block a URL e.g dropbox, does this block the application as well or do we need to double up and also block the application itself under file

...

DUAL ISP Failover Single VR

I have a situation below and I need to be able to configure failover, seeking some guidance.

Basically I have

SG3 (two ISP's in the same VR)

ISP1 (eth1/7)

--------------> WAN-VR2

ISP2 (eth1/8)

Then I have a whole bunch of other sub interfaces on the LAN

...

update.newinfoclientstack.com

I looked in the threat database and PA classifies this URL Inbox update.newinfoclientstack.com as maleware. Is there a way to know if this is covered by the threat prevention subscription? There were no details in how to deal with it in the database

...

Resolved! Quickest way to add and manage Azure / AWS address group

Hi All,

New to PA here - What is the quickest and most efficient way to Add / Delete / Manage large lists of IP addresses and subnets such as ones that belong to AWS or Azure?

I would like to create an Address Group and add in all Azure or AWS IP /

...

URL filtering

Is there anyway to add a URL filtering for an individual address?

Resolved! IPSEC VPN ECMP - Issue

Dear Collegues,

Let imagine the following situation:

PA Firewall connected to two ISP, e1/1 - 1.1.1.1 and e1/4 - 2.2.2.2.

Default virtual router with ECMP configured with weights e1/1-50 and e1/4-50.

IPSEC tunnel configured to the remote site, IKE Gat

...

Resolved! Newb Question: Searching Security Policies by Name (w/ Filter Operators)

Hello!

Brand new to PAN, but diving into it as part of onboarding at with a new employer.

Our company has quite a few security policies (169) compared to the scale of networks I'm used to managing in my past roles (maybe 6-12 on the high end!). So,

...

Resolved! Active/Active failback

Hi,

We are looking at deploying an A/A L3 cluster with dynamic routing (has to be A/A to satisfy requirements of the existing setup). We've pinned all the routing preferences and floating IP priorities to 'unit A'. We are new A/A so any help with the

...

APP-ID and HIgh Port range

Is ther a range of tcp/udp ports that do not have a APP-ID in appipedia? I ask b/c as we are migrationg over 10k rules we are aware not all of them will have PA app-id assoicated so we are trying to filter out those ports and jsut curious is there a

...

Resolved! Enabling a Systems Maintenance page for systems at the PA?

Hi folks,

We have a public IP that NATs to an internal Barracuda Load Balancer VIP that represents several sites, content rules, etc.

I am being asked if we could temporarily change the NAT translation at the firewall to redirect to a maintenance page

...

Resolved! PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256

I need to move a tunnel from a PAN with 6.1.10. The tunnel today uses aes256 for IPSec crypto and for IKE. The tunnel established fine to our biz partner.

In configuring the tunnel on the other PAN with 7.1.9 I notice that my options are aes-256-cbc

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

GlobalProtect Patch management Issue

MineMeld sudden_death...how does it work?

PA-200 Pan OS 5 12 anyone with a config file?

Resolved! Using PA-200 for home internet router?

Application & URL Filtering/ Blocking

DUAL ISP Failover Single VR

update.newinfoclientstack.com

Resolved! Quickest way to add and manage Azure / AWS address group

URL filtering

Resolved! IPSEC VPN ECMP - Issue

Resolved! Newb Question: Searching Security Policies by Name (w/ Filter Operators)

Resolved! Active/Active failback

APP-ID and HIgh Port range

Resolved! Enabling a Systems Maintenance page for systems at the PA?

Resolved! PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256

SSO Activation

OSPF route suppression

SSO Activation

No valid AceMlc2 config: SC 1 (AceMlc2): Config not valid

How to request a URL filtering change to High-Risk?

Re: New periodic alert: Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform.

Support Portal is down.

Re: sorting question

Re: How to add palo to multiple device groups

Error while logging into PaloAlto Support Website

Unlock your full community experience!

Resolved! Using PA-200 for home internet router?

Resolved! Quickest way to add and manage Azure / AWS address group

Resolved! IPSEC VPN ECMP - Issue

Resolved! Newb Question: Searching Security Policies by Name (w/ Filter Operators)

Resolved! Active/Active failback

Resolved! Enabling a Systems Maintenance page for systems at the PA?

Resolved! PAN 7.1.9 aes-256-cbc vs PAN 6.1.10 aes256