General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

IPSEC VPN support for both side as Dynamic, Supported on Juniper but not on PA

Hi There,

I was migrating configuration from Juniper to PA, everything worked as expected except IPSEC VPN.

Customer has two sites and both sites have ADSL connection with Dynamic IP address, however on one end Dyn DNS is used. In the below example S

...

How to block windows 10 store

Can I block access to windows 10 store by policy?

Resolved! Setting up GlobalProtect with Authentication Sequence

Hello,

Trying to configure GlobalProtect to work with local accounts and LDAP accounts with an authentication sequence. The PAN is almost seemingly treating the local account as a LDAP account according to the system logs.

The account Idea11Support is

...

User to group maping for xml-api user who provided no domain string

Hello,

i need to map user to ldap group. For desktops there is no problem, mappings goes well. But if some user connects via smartphone and didn't provide DOMAIN\ then problem occur. Is there any way to achieve this goal ?

Typing DOMAIN\ on mobile key

...

Data pattern to check 2 conditions on Credit Cards

Hi,

Let's say I want to create a Data Pattern to check 2 conditions on DLP:

1) Check Luhn number. This can easily be done by setting a weight in the "CC" field on a DLP Data Pattern.

2) Once the Luhn number checked, check if the first 7 numbers of the

...

Resolved! Bandwidth limit AD group

We have a need to limit download and upload to 50 Mb/50 Mb for a specific AD group in our company. I have followed the steps in this article

https://www.paloaltonetworks.com/documentation/70/pan-os/pan-os/quality-of-service/use-case-qos-for-a-single-

...

Resolved! More than one Radius Connection Profile for GlobalProtect on PAN-OS 7.1.0 and Windows 2012 R2 NPS

We are hosting 4 clients with each having their own server. I have setup 4 separate GlobalProtect Gateways and Portals for each client with access only to their server. I have configured Radius and tested it.

I want to be able have one different Ac

...

Resolved! Command: clear session id 135269 not working

Hi All,

Strange but cannot clear the session below. Did try from GUI first then from CLI. CLI says: session 135269 cleared after still able to see it as active

Any idea?

PAN-OS 6.1.7 PA-5050

Thx,

Myky

Resolved! ACC report on Sunday

Hi Guys,

ACC issue. Don't know what could be the reason for the URL block report to show some activities when nobody was using a network on Sunday. NTP? And also question to why all users got 2 digits in the end of their username, Is it normal?

Thx,

M

...

Wildfire: different level of severity for the same file

Hi

I don't understand why the same file has different level of severity in wildfire.

Could you explain me?

thank you very much.

best regards.

Resolved! What kind of protocol used PA to HA

Hello community,

Do you know what kind of protocol use PA to your HA, VRRP, CARP.. ?

Best Regards

Andres Padilla

Any known issues with PAN OS 5.0 for user-ID and IP mapping not working?

I have a lab setup with two palo alto firewalls (PA-200). I am running it with the code it came with the device (PAN OS 5.0.6).

I configured User-ID as per the guidelines on this link (https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to

...

BlackNurse Testing Causes issues on Egress Firewall

FYI It doesn't appear to require an attack to be an IP address bound to the PA.

It also appears that testing a remote firewall while egressing through a PA firewall causes your local firewall to experience DOS effects. It is not just inbound to an IP

...

Resolved! TLS secured SMTP inbound inspection?

Hi,

I've recently had a client who's PAN appliance failed to pick up a Zero-Day piece of malware that found it's way into their network via email.

We have wildfire configured correctly and it transpires they are using opportunistic TLS on their mail re

...

Resolved! show routing resource

When using show routing resource command. Why is there a overlimit value when we are under the 2500 limit count

LOBAL ROUTING RESOURCE USAGE:
==========
All Routes (total): 1088 (limit 2500)
All IPv4 Routes (total): 1088 (limit 2500) (overlimit counts

...