General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Resolved! How to check drops on PA-500 due to performance limits

Hello!

Is there way to check session/packet drops on PA-500 due to performance limitaions?

Scenaro:

There is PA-500 appliance, that provide internet access to +2000 users with agentless integration with AD.

Management CPU average load is about 70-100

...

SSL Decrypt Problem with Chrome

Hello all,

We are having some problems with SSL Decrypt with Chrome. When we try to connect to some pages appears certificate error that I attached.

I have PanOS 7.1.8 and only occurred this with Chrome. Know somebody how I can fix this problem ?

Ki

...

Resolved! PDF Summary Reports - How to increase the "TOP" hits in the TOP Denied Sources

Hello Experts,

I have a Daily Summary Reports where i have the output for almost 16 sources (meaning daily summary data on Top Connection, Top Destination countries, etc. etc). I noticed that it only displayes the "TOP 5", is there a way i can increas

...

Resolved! Expected behaviour for Null, FIN and XMAS scans

Running through a few very basics tests to prove Zone Protection etc with a customer, what is the expected default behaviour for reconaissance scans such as Null, FIN and XMAS scans?

Currently I can get the following nmap commands to run without issu

...

Resolved! 30-days demo license

How to get 30 days URL-filtering and Threat prevention license for PA-2050-NFR

Resolved! GP Server Certificate Verification Failed

Hey guys,

I wanted to upgrade the Global Protect Version.

Currently, I have version 2.3.4 in use an everything works fine.

Now I have a new mac with 10.12 and therefore I need version 3.1.1 of GP.

So I activated it on the firewall, installed it on th

...

Resolved! Commit error

I'm getting an error when committing on an instance I had spun down for a year and then upgraded yesterday when spinning back up. Looking in logs it looks like it's having problems resolving one of the miners but I'm not positive.

Any thoughts on h

...

PA Default Behaviour for un-matched UDP traffic?

Hello,

I am pretty new to PA firewalls, and started looking at the default firewall behaviour for various kinds of traffic.

Hence wanted to know, what happens when PA sees unmatched UDP traffic, say a DNS reply, from outside for which it doesn't have

...

Resolved! Offline Filtering Options

Is there an offline agent/option that will filter URL traffic when an end point is not routing through the Palo Alto? We have several company provided laptops that we want to secure when users take them home.

Configuring User-Id With Radius

Hello Dear Community,

I have a client who wants view user-id users name of the radius server on Palo Alto Logs (Like happens with LDAP Active Directory)

The SO of the Radius Server is Windows Server 2008. I saw there is a link on Palo Alto KBs to con

...

Increase system log output shown in GUI

How does one set the the GUI to display more than a handful of system logs? For example I wand to see last 60 from GUI

Resolved! Best way to manage Dropbox

I am looking for a good way to manage the use of dropbox. Ideally I would like to deny all and allow particular people to access. Any help on this would be great.

Running Minemeld on CentOS

Is there any plans to package this up to be installed on CentOS? I am using it curently in AWS for dev but would like to bring it in-house for production and currently our Linux team only supports Rhel/CentOS.

Post process Minemeld URL list

Hello -

I am loving the product so far, but ran into an issue recently. The miners are pulling the URL's correctly from Microsoft, but some of the URL's are not formatted correctly for use. A few examples:

*-my.sharepoint.com

*word-view.office

...

DHCP Server on Palo Alto

The DHCP server on Palo Alto does not clear the Expired sessions, its stays and we have to manually go and clear the sessions.

Can you please help.