General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

integration with facebook

hi, I am creating a wifi network with a PA200 and the form of authentication of the network and via facebook, has anyone done this integration?

Warning possible Critical bug pan-os 7.1.12 on a vm-100 HA cluster

I just had a very bad experience with pan-os 7.1.12 on a vm-100 HA cluster. After installing 7.1.12 (upgrade from 7.1.11) on the passive node interface 1/1 passes no traffic when when i make the upgraded node "active"The network icon on the network tab shows red and no traffic is flowing on that interface, other interfaces function normal.In t...

Resolved! Multiple acitve ISP's

We would like implement multiple active ISP's. There would be two ISP with each being a different provider.It appears you can have a redundant setup with multiple ISP, but can you have two active?

Resolved! Auto-commit

there a way to set the auto-commit on a schedule?, and if i have changes of configuration pending, the autocommit will apply the changes?

URL problems

hello.although the rule is set to allow any but in request to some web-sites we can see such a problem.there is incomplete in application coloumn.i understand that it cannot pass the three-way handshake.but why only with any sites?

Why is destiantion IP missing along

Whis is it that I get deny and not-applicable and why is it that destination interface is missing from as shown below screen

Screen Shot 2017-09-05 at 6.16.28 PM.png

Unable to Update License from the License Server

Hi, I am very new to Palo Alto and trying to active licence on new PA-850. the devices are already registered on support portal using serial key and authcode. when i click Retrieve license keys from license server, z dialogbox opens and tells me retrieving licenses from Palo Alto Networks license server. Please wait... and then suddenly dialo...

Resolved! Error in EBL Refresh job

Hi guys! I have two PA-5060 in HA and in this moment my secondary is active. In secondary I've seen the following messages:EBL(dyn-block-list-ip-sadc) EBLRefresh job failed. No valid IPs found in listEBL(dyn-block-list-ip-sadc) Unable to fetch external list. Using old copy for refresh.EBL(dyn-block-list-ip-sadc) EBLRefresh job failed. No valid ...

Resolved! TAXII output deduplication problem

Hello! Could you tell me why taxii output doesn't do data deduplication? Is it normal behaviour or bag? This problem is very important for us because we have huge amount of IOCs (about 450K). TAXII output just multiply this list. Additionally after the output toked 1000000 IOCs it just stop to accept new data until deletion of some old IOCs. The...

Miner Node show error "HTTPSConnectionPools" and "ConnectTimeoutError"

I have errors from retieve feed file form any source. It shows "HTTPSConnectionPool (host='source',port=443): Max retries exceeded with url: xxxx.txt (Caused by ConnectTimeoutError (<requests.packages.urllib3.connection.Verified object at 0x7fdd988ad310>, 'Connection to souce timed out. (connect timeout=20)')) But I can use wget fil...

Resolved! Single vWire to Multi vSys

Hello, I wonder if someone can help - I currently have a firewall deployed in a vWire configuration, however the requirements for the site are changing and we now need to utilise the Multi-vSys feature.I've had a look but can't see any information that specifically states whether or not when this license is applied and Multi-vSys is enabled, whe...

Resolved! Troubleshooting Slowness with Traffic, Management

Hi, I am reconfiguring my PA-100 VM, as i am changing the network design, but after i changed the interfaces IP, Router configuraattion, NAT policy, and security policy. I cannot get to internet and in monitroing end reason is "aged-out" From CLI i can ping and traceroute using the management and external interface as source, but i cannot use my...

Resolved! How to create IPSec VPN tunnel between two Palo Alto 200 firewalls?

Hi folks, I went and bought another used PA 200 from Ebay to go along with my existing one to test my first IPSec VPN connection.Neither have a support or threat license at all and not registered.PA 200 #1 has PANOS 7.0.5-H2 and PA 200 #2 has PANOS 7.1.9. I am using PA administrator's guides and other material to create an IPSec Tunnel, but stil...

Resolved! How to create an internal type NAT?

Hello folks, Not sure if my question is worded just right, but here goes. 🙂 We have a partner company that has a Juniper NAT type of device plugged into our PA 3020 that does a NAT to a server in there environment, which we communicate with fine using the 10.1.5.x network.I am being asked to do something similar on our side. Today they are abl...

Resolved! Advertise/Redistribute iBGP routes/prefixes to eBGP neighbours.

Hi All, Guys don't judge me, but l have a very little knowledge about the BGP process (iBGP and eBGP) and looking for assistance.Watched a nice video on youtube on how to advertise eBGP learned routes by iBGP peer to other iBGP peers using route reflector technic: https://www.youtube.com/watch?v=yaMUq6WTUTc This part is clear. We have a PA conne...

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

integration with facebook