General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

API for clearing session

Can some one share some light on creating some API to do below steps:

1) identify an application or port ( for ex: 5555 or backup app) when this traffic apprears on one egress interface , need to clear the sesion for this specified traffic.

( situati

...

Number of session

Hi,

Palo alto suddenly stops client going internet .

resolving dns stops ( dns forwarder just giving timeout instead of the dns query result ) .

Does it mean maximum number of session has saturated?

How can we know maximum number of session reached

...

Wildfire SMTP - Malicious objects not blocked

Hi,

We recently had our FW setup by an external security company.

Yesterday we had a malicious email attack which got past our email scanning service. Although Wildfire identified the attachments as malicious, they were sent on to the recipients (aro

...

Resolved! Nest a External Dynamic List (type=URL) in a Custom URL Category

Is it possible to nest a External Dynamic List (type=URL) in a Custom URL Category or to nest Custom Categories?
Example:
Custom URL Category = "Allow List"
External Dynamic List (type=URL) = "Immediate Allow List" on external server (http://10.11.30.4/

...

Resolved! Security Policy for IPSec traffic

Hello,

We are setting up Site-to-Site IPSec VPN between PA and Cisco router. The examples provided on PA websites do not suggest any security policy for this. When we use a security policy for 'Outside-Untrust' to 'Outside-Untrust' to allow traffic b

...

Resolved! Do I require SSL decryption to enforce URL filtering

Hi guys

I hope not but just clearing my doubt on this as I know app I'd do require decryption for application identification.

Regards

scan-host sweep

Hi,

Under threat detection, scan host sweep droped some traffic. And under the rules it did not show anything .

What does it mean

Thanks

Telegram website is not accessible

Hi,

I've one client that cannot access https://telegram.org but he can access all other https website.

We tried to use a security rule with one source address and any any allow but still the same.

In the traffic monitor we can observe the session end

...

Resolved! How Many public IP be required to setup full HA Active-Active Mode With two Palo Alto NGFW 3020?

Hello Geeks,

I would like to ask for your kind support on my issues of 'How Many WAN IP will be required to setup full HA Active-Active failover mode with two Palo Alto NGFW 3020?' First of all, I would like to appologize you all if my question may m

...

Resolved! spoof

Hi,

How palo alto blocks if ip address is spoofed .
Why does it not work in vwire mode
Thanks

Link Aggregation Query

We have PA 500 which links to 100 Mbps throughput as mentioned by datasheet.

If we do link aggregation would it be possible for us to increase that ?

Thanks in advance.

Resolved! Site to Site VPN with error Failed SA

Hi,

We have configured a site to site vpn between palo alto and cisco ASA. However, both sites are static and PA is the intiator, ACL is configured properly on Cisco side but I got the error:

"IKE Phase-2 negotiation is failed as initiator, quick mod

...

FastPath explain using packet captures

Could someone here with documentation on packet level capture for fast path process ?

Just for better understanding.

"Client cert is invalid to the gateway" error

Hi,

I am trying to setup machine cert authentication, but it appears I am missing something. Local user auth works fine without certificates. Gateway and Portal are on a single 3020 with 7.1.

I created a local-CA and generated a cert for all windows

...

Changing Global Protect Portal Using plist without Restarting Mac

Here are the steps I've tried in chaning the portal Global Protect.app without restarting the Mac:

Packaged up /Library/Preferences/com. paloaltonetworks.GlobalProtect.settings.plist and ~/Library/Preferences/com. paloaltonetworks.GlobalProtect.setti

...

Discussions

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

Ensuring a Safe and Secure Community: How You Can Help

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

API for clearing session

Number of session

Wildfire SMTP - Malicious objects not blocked

Resolved! Nest a External Dynamic List (type=URL) in a Custom URL Category

Resolved! Security Policy for IPSec traffic

Resolved! Do I require SSL decryption to enforce URL filtering

scan-host sweep

Telegram website is not accessible

Resolved! How Many public IP be required to setup full HA Active-Active Mode With two Palo Alto NGFW 3020?

Resolved! spoof

Link Aggregation Query

Resolved! Site to Site VPN with error Failed SA

FastPath explain using packet captures

"Client cert is invalid to the gateway" error

Changing Global Protect Portal Using plist without Restarting Mac

SSO Activation

OSPF route suppression

SSO Activation

No valid AceMlc2 config: SC 1 (AceMlc2): Config not valid

How to request a URL filtering change to High-Risk?

Re: New periodic alert: Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform.

Support Portal is down.

Re: sorting question

Re: How to add palo to multiple device groups

Error while logging into PaloAlto Support Website

Unlock your full community experience!

Resolved! Nest a External Dynamic List (type=URL) in a Custom URL Category

Resolved! Security Policy for IPSec traffic

Resolved! Do I require SSL decryption to enforce URL filtering

Resolved! How Many public IP be required to setup full HA Active-Active Mode With two Palo Alto NGFW 3020?

Resolved! spoof

Resolved! Site to Site VPN with error Failed SA