General Topics

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free

Hey Everyone!

The Fuel User Group is now part of LIVEcommunity! If you haven’t come across Fuel before, it’s a space where you can connect with fellow cybersecurity folk, share knowledge, and learn from each other. It’s completely free as well! Fue

...

Welcome to the General Topics Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating:

Rules and Best Practices

Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussion

...

Resolved! LDAP auth for the WEB UI access clarification

Hi All,

Why do we need step 3 mentioned in the KB below for the WB UI authentication with LDAP?:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGuCAK

Why do we need to create a local user? Won't Palo be an LDAP proxy (gra

...

I cannot delete a virtual wire interface

Hello,

I've already looked at similar topics here, but it did not help me.

I'm supposed to set up a DHCP server on ethernet1/2 and to do it, I need to set up ethernet1/2 as a layer3 interface on the CLI first.

Initially, I tried these commands:

...

Timeout while exporting a device state into a TFTP server

Hi,

I'm trying to export a device state from the Panorama CLI into a remote TFTP server, but I get a timeout.
Both the Panorama and the TFTP sever are on the same network, so the traffic does not pass the firewall.
Also, there's over 200 GB of free s

...

Variables is DNS Proxy rule?

Hi,

My question would be, is it possible to use template variables to set primary end secondary dns for DNS proxy rules in Panorama?

I can set a static entrys' IP address value to a variable defined in the template, but can't find the way to do the

...

Resolved! global counter tcp_case_2

I am running a set of vm-series VMs on Azure. From time to time there is packet loss for traffic going through one of these VMs, I am trying to find a metric to monitor that.

I could not find a metric exposed through SNMP, but looking at the global c

...

Unable to downlode PAN-OS for VM-Series KVM Base Images

Hello Team,

I am not able to downlode PAN-OS for VM-Series KVM Base Images. we gating below error.

Resolved! New periodic alert: Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform.

Dear all,

since a couple of days I'm getting alerts like:

Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform. Please consider removing unused configuration

I removed all old auto saved configs

...

Resolved! A question about ECMP

Hi，

I saw a function named ecmp on palo alto NGFW, I think that it can make outbound traffic load balance on two or more physics line or logic line. And I also saw there was a inbound interface information in the session table of firewall.

So

...

Community Expert Verified

Resolved! Can you sort security policies by the hit count?

Hi;

Can you sort security policies by the hit count?. I could not do that, but thought I would ask.

Kindly

Wasfi

Resolved! SNMPv3 read-only permission

hello all,

i'm trying to create snmpv3 user account with read-only permission but when i went through the option on GUI there was nothing about specifying the permission whether it's read-only or read & write.

i would really appreciate the help.

Palo Alto Networks Approved

How can I search a particular source&destination address in lots of security policys？

Dear all:

I have a question about search security policys. We have lots of security policys on our pa ngfw. some of them use a address group as a source& destination condition, some are not. The content of address-group may be a range or a

...

Question regarding Signal messaging application

Currently have a PA-440 at home and trying to setup Signal messaging application. I know the application is cert-pinned and therefore cannot be decrypted. To get it to work, I added to the SSL Exclusion Decryption list the following hosts/domains p

...

How to onboard passive PA440 firewall to Panorama using dataplane interface

I need assistance integrating Palo Alto firewalls in an Active/Passive HA setup with Panorama. Below is an overview of the setup:

At customer sites, we have Palo Alto firewalls configured in Active/Passive HA mode, and they are currently managed lo

...

CONFIG logs and syslog

Hi there,

we're shipping our logs to a centralized syslog instance. That works great for all types of logs from the PA with the exceptions of the CONFIG logs.

The CONFIG logs are submitted at all, with the problem that the interesting parts "before-ch

...

GlobalProtect 6.3.3

Our vulnerability scanner for the last couple weeks has been reporting vulnerabilities for GlobalProtect that are remediated with an upgrade to 6.3.3, but other than the vulnerability acknowledgement from PA mentioning it I do not see any evidence of

...

General Topics

Discussions

Discover LIVEcommunity Through Our New Animated Explainer Video!

Fuel User Group is Now Part of LIVEcommunity – Connect & Learn for Free