General Topics

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

globalprotect fails to connect on windows 10

GlobalProtect doesn't connect on my new windows 10 laptop (64 bit). I tried reinstall/reboot several times, but it didn't help.

The PanGP Service log shows :

21:49:49:463 Debug(1241): Session 1, domain name XXXXX.
(T4740) 05/12/16 21:49:49:463 Info (

...

GlobalProtect 3.1.4-7 + N600 Wireless Dual Band Gigabit Router (TL-WDR3600) problems

Regards,

have GlobalProtect 3.1.4-7 + N600 Wireless Dual Band Gigabit Router (TL-WDR3600).

When using wifi everything is OK.

When using LAN (UTP cable) VPN connection trough GP is interupcted periodicaly for couple of pings and then restored back.

Im l

...

Upgrade to latest 7.0.x or 7.1.x?

Hi,

we are planning to upgrade our 3020 A/P Cluster to latest PANOS (7.0.x or 7.1.x). Currently we are runing 6.1.13.

We want to do more SSL Decryption (Inbound & Forward Proxy). What are you thinking is the best and stable release for 3020 A/P Clust

...

with session offloaded packet will not go through dataplane ?

how will that packet flow ?
what does offload processor exacly do ? understanding of it
why it needs APP-ID completed

Resolved! Recommend any specific tools to "stress test" the Palo Alto

Hi Guys,

Any specific Stress Test tools could be used for Palo, looking to generate a hundred thousand flows. Can Kali Linux or any others do this?

Cheers,

Myky

Thinking about blocking executable file downloads - Gotchas?

In our environment, we have eliminated the scourge of people being local administrators on computers, with the exception of administrative accounts assigned to some of the IT personnel. I'm thinking about blocking the DLL, DMG, EXE, MSI, and PE file

...

Resolved! Source Based Custom URL Lists

All,

Does anyone know a way to setup source-based Custom URL Lists containing domains as an alternative to using source-based IP addresses and address groups? I don't think it's possible in any of the current versions of PAN-OS but i am looking at o

...

Switch from Static to Dynamic Address Object Groups

Hello all,

we are running into an issue where we are unable to change static address object groups to dynamic address object groups

We have an M500 and several PA7050 and the objects are managed under the "shared" device group for all the PA7050's. W

...

GlobalProtect VPN usage reports?

I'd like to generate a scheduled report of all the GlobalProtect VPN users connected in the last 24 hours. Is this possible to create in Pan OS 7.1?

Resolved! Setting filters for system logs for severity level High

I want to set email alerts for high severity alerts but want to put some filter for his high serverity also like some keywords.

Is it possble to set email alerts only for some keywords in high severity alerts

Resolved! Office 365 - Polling issue

Hello,

I have noticed an IP address which is published by Microsoft and not “mined” by minemeld: 40.112.64.16/28 in Office Identity.

I don’t this this IP range in published IPv4 feed (I have imported default configuration published in Live).

How

...

Userid agent version for PAN-OS 7.1.6

What is the proper Userid agent version to be used for PAN-OS version 7.1.6?

Is it possible to "whitelist" a source in zone protection profile?

Some of our networking tools are triggering ZPP actions. Is it possible to whitelist a source so that thresholds in reconnaissance protection are not triggered? Altering the thresholds would make the recon protection basically ineffective.

Windows Updates across a Site to Site VPN

I have a WSUS server. I have a Site to Site VPN from a PA-3020 at a hosting facility to a Cisco ASA on my corporate network. The PA-3020 is running 7.1.4. When I try to run updates from the servers in the hosting facility, it shows as ms-update in

...

Resolved! Static Route via CLI

I have a firewall with multiple Vsys/VRs. Need to add a static route from one VR to another and I know I can do it via GUI, however I like to use the CLI if possible. So would this command add the static route from one VR pointing to another?

set n

...