General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Create a xml of the current config

Hi

I wanted to move some pre-rules to post rules in my panorama config.

I wanted to try and do it with load partial.

But I am having issues generating the xml files

I ssh to panorama

set cli config-output-format xml

configure

save config to 20170625-Alex

...

Resolved! Asym routing and policies

Hi

If I have a TCP stream that is initiated and because of routing changes now has to flow through my PA, how to I allow this through.

On my other firewall's I can allow non SYN and SYN/ACK through but block SYN's.. How does one do that on a PA with

...

Resolved! Panorama 8.0.2 Managing PAN-OS 7.1.10 - Aggregate Ethernet AEx has no member interfaces

Hi All,

I am currently working with customer, who had an existing Panorama implementation that was upgraded from 7.1.7 to 8.0.2. The reason for the upgrade was due to the certificate expiration, take too place on June 16. The new HA pair I am impleme

...

Screen Shot 2017-06-24 at 11.13.40 AM.png

Screen Shot 2017-06-24 at 11.28.55 AM.png

Problem with Autologon GP on Windows 10

Hi all,

We have an issue with windows 10 machinesw and autologon in GP. When we powered on win7 machine the first time it took user credential properly an logon on the system automatically. On Win10 we need to login the first time manually, the follo

...

Can I see bandwdth by zones?

Hi everyone, I have a customer's requirement about bandwidth monitor between zones, can we do this analysis with NGFW?
Thanks in advanced!

Create Policy Report based on CIDR

Hello

Is it possible to sort policies by CIDR and create a report that

-lists the policies

- displays the IP, not the group (if in a group)

I'm trying to do this using Tufin's policy analysis but it's not working out.

thanks in advance...

Global Protect Very Slow

I am checking to see if anyone in the community can help before I try tech support. I have noticed recently the clients using Global Protect are have VERY slow performance. My tests at home show that I am getting 100mbps download without the Clobal

...

Question to Wildfire appliance

Hey all,

I have some questions to the wildfire appliance:

https://www.paloaltonetworks.com/documentation/60/wildfire/wf_admin/wf-500-file-analysis/about-the-wf-500-wildfire-appliance

We don't use the public wildfire because we are not allowed to send

...

GlobalProtect SSO and 3rd Party Credential Providers, What did you do?

Hello,

We recently installed Palo Alto firewalls (3000 series) and are currently working on our VPN configurations.

We have multiple 3rd party credential providers including drive encryption and Windows single sign on. One of the selling points was t

...

Resolved! Policy Based Forwarding vs Security Rules

Hello,

I am not quite sure about the difference between rules created under 'Policy based forwarding' and 'Security' under Policies tab.

Could someone please help understand how are the rules different that are created under security and Policy based

...

Important information regarding Content Apps & Threats version 709 -dataplane restart

I just move to 7.1.9 about a week ago and there seem to be warning of issues with dataplane restart and I thought it was related to the threat version 709 and I am now on 710. I have seen no issues so do I still need to upgrade to 7.1.10

Resolved! OID for CPU/MEMORY on PAN 5050

I'm looking for an OID to use for monitoring the CPU/MEMORY utilization with my NMS system. My MIB walk didn't turn up anything useful.

Thanks,

Resolved! SCP Export Query from Panorama

I'm having a bit of trouble with the format for exporting traffic logs from Panorama for a particular user. I've setup the CLI command as below but the resulting csv file is empty.

scp export log traffic query "user.src equals <username>" ...

scp expo

...

Resolved! Panorama Device groups and pre and post policies

Hi

Okay just to under stand

if I have a device group

Top

Middle

pa

and I place my device in pa group

and i have rules security

in the pre section

top -> Rule 1

middle -> rule 2

pa -> rule 3

how does that look on the actual PA. if I look at my device secu

...

Resolved! App-id and Migration Tool with Panorama

Hey all,

I use Panaorama to manage our firewalls. At the time of our deployement we simply just migrated the existing ASA configuration to the PAN Firewalls to get them up and running as fast as possible. We would now like to migrate our service port

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource