General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

How to use a Taxi Output for SIEM ingestion when MM is hosted by Autofocus

We have a taxi output in MM that is hosted by Autofocus. Wasn’t able to find a doc on how to pull the stix/taxi feed from MM to a SIEM (Splunk) when its hosted by us. Anyone done this?

Resolved! Low Forwarding 8.0 (7050)

When following white paper. When i get to verify i get below: Not sur ewhat this means as I only have 1 collector . Please adivse admin@PALO-TIA-03P-HA(active)> show log-collector preference-listLog collector Preference List is malformed

How to delete all unused rules?

Hi Guys! I am looking for an way to delete all unused rules. On CLI, I can list all unused rules: > show running rule-use rule-base security type unused vsys vsys1 After that may it is possible to delete the rules from it. Thanks!

User-ID Mapping To Not-Domain-Joint Devices

Hello, What would be the best way to enable User-ID for devices that aren't joined to the domain? We have a number of contractors whose laptops aren't members of the domain but we would like to enable User-ID to be able to monitor their User-IDs? Thanks in advance. Best, ~zK

Resolved! How to setup no decrypt for Office365 and Lync

I would like to set a no decrypt policy for the applications ms-Office365 and ms-lync. But the only option in no decrypt is for URL category. How can I configure the no decrypt?

Issues installing Minemeld

hello, am having an issue installing Minemeld on a vm.. ubuntu 14.4 it gets hunged up at task npm install

Resolved! User-ID for Non-AD Operating Systems?

I'm curious what others out there are doing for user identification for systems that don't integrate with AD? My understanding for Mac OSX was that some are popping up a GlobalProtect client login that requires them to enter their domain credentials to continue but then just uses it for ID purposes and does not establish a tunnel. I was curious...

Captive portal not getting login prompt with IE11.

PANOS- 7.0.6 . I am not getting prompted for captive portal login sometimes with ie11. works with firefox.

Windows Update issues - Windows 10

I am currently troubleshooting an issue on PAN-OS 8.0.4 regarding the ability for Windows 10 / Windows Server 2016 to update via Windows Update. Windows Update for Windows 7 is working fine, however any time I try to download updates on Windows 10 (Creators Update) it fails unless i add a the subnets below to exclude them from decryption. As t...

Resolved! SNMPv3 Prfile import /export

I have a current SNMP profile using snmpv3. This setup in Panorama is in production. In the event i want to mimic this SNMPv3 profile in my lab Panorama is it possible import just the SNMPv3 profile portion of config with the encrpyted password as well into my lab from prod or would I have to manually type snmp auth/priv passwords in lab bo...

Setting independent headers on HA cluster members

Hello, I set headers (Device > Setup > Management > General Settings) for each machine in an HA cluster to identify which machine I'm looking at per the recommendation in the Fuel Best Practices book. I was surprised to see that the setting syncs to both machines, which kind of reduces the utility of the feature (the machines are geogr...

PA time out accessing web

Hi, We have a PA in 8.0.4 version and we cant access to this web https://www.metromadrid.es. The only web is not working is this.We tried to create a rule permitting all traffic, without any profile, but its not working. We see the session like allowed, packets sent and received, but browser stuck loading and web is not showed. this is the sess...

Resolved! Thanks to all you guys.

Hello Community, Just wanted to say thanks to you guys for all your support, bright ideas and thoughts. It was a big pleasure for me to meet you all here, discuss different technical issues and problems. l definitely boosted my Palo skills because of this forum. l also hope that l helped other people with their requests and issues.This communit...

Dynamic object not getting add to the address group though it's tagged

Dynamic object not getting add to the address group though it's tagged show object registered-ip tag x99MGMT-AD_TAGvsys: (null), ip: (null), tag: x99MGMT-AD_TAGcurrent download interval (sec): 60new changes since last download: noregistered IP Tags---------------------------------------- -----------------10.59.113.11 #"x99MGMT-AD_TAG"10.59.112.8...

Disable globalprotect splashscreen?

Anyone know of anyway to disable the globalprotect "splash"screen or preventing gloablprotect window from popping up EVERYTIME the user reboots on a mac? I have about 75% of userbase asking for this and haven't seen anyway to do it. Thoughts?

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!