General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

PAN-OS Certificate expiration

Hi All, i have question on the following article : https://live.paloaltonetworks.com/t5/customer-advisories/update-to-additional-pan-os-certificate-expirations-and-new/ta-p/572158. My panorama version is 10.2.10 and my userid agent is on 10.2.3. Based on the table in the advisory, 10.2.3 is not included. However, am I right to assume th...

Not able to connect Global Protect VPN on IPAD device

Hello Friends, We have a customer who is not able to connect Global Protect VPN from IPAD device with error "could not verify the server certificate of the gateway" I revived the configuration and selected connection method as on-demand in the app setting of GP Portal and did commit. After commit, we were getting error "the network connection ...

Resolved! VPN tunnel question…

Hello, I am trying to find out the logic about this scenario. If we have an ikev2 tunnel, and only a single /32 route in the routing table to reach the tunnel peer (assume dynamic routing for encryption domain), and for some reason that route gets retracted from the routing table, does the tunnel only go down once liveliness check fails, or ...

Bug Search Tool

I'm new to the PA product and website (I have active support contracts and a valid login to the support website)Where can I find the bug search tool on the Palo Alto customer support website?I'm trying to find the text of a specific bug and what release it was addressed, or what the target fix release will be.(PAN-62675) Thank You,Eric Davis

Resolved! request sc3 reset API

Does anyone have the XML API syntax for the "request sc3 reset" commands on the local firewall. request sc3 reset debug software restart process management-server If not I guess i will gather it with the debug cli on. But was hoping someone could save me a step 🙂

List of System OIDs

I'm looking for a list of System OIDs. I have a number of PAs that are not being discovered with their proper model type. The set of devices are polling with a generic SYS OID. And I'd like to reconfigure the PAs to reflect their model type.

discrepancy regarding web-browsing ports between applipedia and Pan-OS application

Dear community! Did you notice that there´s an discrepancy regarding web-browsing ports between applipedia and Pan-OS application? If you check for web-browsing details in the firewall you see standard port 80 and secure port 443. In the applipedia you can see only standard port 80 associated to the web-browsing application: This can ...

Resolved! PAN OS REST API

I am just starting out and learning automation. I am using PAN OS 10.2 on PA 820 lab device. When I try to use a use the GET Method to query addresses, the restapi-doc shows: https://10.x.x.x/restapi/v10.2/Objects/Addresses . I don’t see the “"Invalid Query Parameter: key". Could it be that my API key is bad or invalid? Below is my curl ...

PA Antivirus content updated Signatures not able to view on Panorama Antivirus profile

1. The issue is that customers are unable to see the signature exceptions of the Antivirus security profile in Panorama and firewall, but they are able to see the exceptions of other security profiles, so you need to check on the same. 2. First, we checked for this behavior and tried to manually upload the signatures and it was added successfull...

Resolved! SSL Decryption Auto Tag URL to No Longer Decrypt

Hi, I am working to get SSL decryption built in our environment. I have policies I want to start with. NoDecrypt_ByDestination (add sites as needed to dst and has NoTLSDecrypt-grp) NoDecrypt_BySource NoDecrypt_ByCategory (financial-gov-health-legal and custom URL Object Do-Not-Decrypt) TLS_Decryption - actual decrypt rule What I'd like to s...

Resolved! commit confirmed X on PaloAlto firewall ?

Hello All, I am a newbie to PA firewalls but have some experience with JunOS firewalls. I like the "commit confirmed XX" command on JunOS because it will revert a change after XX minutes if for some reason I get locked out. A good example is when changing speed/duplex on an edge firewall that I may get locked out of. Is there an equivalent com...

Cisco SFP-10GB-LR in PA-3430

Hi All, Has anyone tried this yet and does it work? to use a Cisco SFP-10GB-LR module in a PA-3430. yes I am aware of the support aspect around not being true palo branded, but time is of the essence and I need a quick solution as the Palo branded SFP is 5-6weeks leadtime and cannot wait that long.the Cisco SFP i have some spares but not close...

Website works in Incognito but in normal browser

Hi Team, We have issue with the Videos playing in Normal browser. But it works fine with the Incognito Mode. This traffic passes through the Prisma and i dont see any issues as such which could relate this issue. Any one faced this weird issue before, if yes please suggest the solution you implemented to get through this? Regards, Sanjay S

Issue with PA-1410 platform disk size

Hello Team, Recently we have deployed PA-1410 in our datacenter and since first day we are having issue with disk space in loggin. and after contacting the support, logging is not more than a week which is not accepted from our side. I know that the PA-1410 disk is 128GB. Did any one met with a similar issue? what was the solut...

Resolved! CLI command showing the status of NTP synchronization

Is there a CLI command showing status of NTP synchronization?

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

PAN-OS Certificate expiration