General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! Generated, start and receive time detailed log view

Hello Guys,

How to interpret generated, start and receive time under the detailed log view for the particular session:

Thank you,

Myky

Threat and general reports

I am new to the Palo Alto and I'd like to generate threat and monitoring reports. Are there any webcasts on generating custom reports? Thanks

PAN-OS 8.0 Decryption Issue with Firefox and Chrome

After uprading my lab to pan-os 8.0 The forward Decryption failed when using Firefox and Chrome.

IE 11 en Edge still works.

For example when i go to www.google.com,

Chrome displays: www.google.com uses an unsupported protocol.

...

Palo alto still support TLS 1.0 ?

Hello Communuty,

Palo alto still support TLS 1.0, PANOS 7.1 and 8.0 ?

Best Regards

password recovery

Hi,

I pressed "M" while booting and i am not getting the console after that.

Kindly someone help me to resolve this issue.

Regards

Suresh Kumar

8197826493

Resolved! Custom Application ports secure at Layer 7?

Hi folks,

We have created an Application override and custom Application for SIP and RTP traffic. We also have Security/NAT rules that allow only this application (ports 5060, 5061, and 6000-8000) access to an internal VM with public IP directly.

As

...

Resolved! Feature Request

Can we get a widget that shows status and performance metrics of user and ipsec vpns? Status is hard to find (and not on one pane), and there are no performance metrics at all.

Unable to connect to https://login.microsoftonline.com

hi

The whole company behind PAN firewall is unable to connect to https://login.microsoftonline.com.

no blocked page, just "sign in to your account" web portal but no place to login. Firewall does not show any blocked/dropped connection to this URL.

I cr

...

SSL decryption and browsers behaviours

Hello,

We are planning to perform SSL Decryption for overall Web Traffic (we are a public organization of around 5000 users).

We have started several tests by implementing SSL Decryption Best practice like not decrypting "Financial Services" and "Hea

...

Resolved! Wildfire & ZIP files

When I have the PE type selected for Wildfire are ZIP files sent to be scanned if they contain EXE files? I thought they were, but figured I would ask.

Resolved! Security Policy Exception

Has Palo Alto looked into the capability for security policies to be built using an exception based logic. For example:

Src: 10.0.0.0/8 (except) 10.100.0.0/24 Dst: ** App: ** etc.... This would then allow all 10. traffic except for the 10.100.0.0/24

...

Log filter for RANGE of IP's or Ports

Does anyone know the syntax used to create filters for port or IP ranges?

For example, I want to filter on IP's 10.0.0.1-10.0.0.5 9same for port ranges).

Thanks in advance

Blocking/Alerting on Web Sessions to IP Address Formatted URLs

One of my customers has asked if it is possible to block and/or alert upon HTTP or HTTPS connections that are made directly to an IP address instead of a dns name. The specific IP addresses or DNS name is not defined, they would just like to alert u

...

palalto-updates vs ssl

After years of content update traffic showing up in traffic logs as paloalto-updates application, this traffic suddenly started showing up in traffic logs as ssl application. This all started at approximately 6:40pm Eastern time on 4/1/2017.

Has anyo

...

Resolved! Wildfire file-size-limit

Just installed PANOS6 on a PA200 platform.

Did a change at the configuration and tried to commit. While commit I get the message:

Validation Error:
deviceconfig -> setting -> wildfire -> file-size-limit unexpected
here
deviceconfig -> setting -> wildfire

...

Discussions