Log forwarding - Filtering and Auto- tag not working

Hi there,

I had setup Log forwarding profile, where I am sending All logs to syslog server. Thats working great.

Then I added one more line where I am filtering threat logs for (severity eq critical) and (zone.src eq internet_zone)

Checking f

ARP Proxy didn't work after PanOS upgrade from 10.1.6 to 11.1.2-h3

Short description:  We upgraded to 11.1.2-h3 on an HA pair of PA-820s last night, and the NAT/ARP Proxy that was functioning on PanOS 10.1.6 is no longer functioning.

We would really prefer a simple solution on 11.1.2-h3 rather than going through a

slow GUI

Hi,

why my GUI is soo slow ? I have to wait 10-15 sec for new clicked tab to open. (Main Menu on top)

Does anyone of you have the same problem?

My PA is PA-2020, software version 4.0.3

Config Audit Failure

Hello~

Does anyone know this failure message that we use Config Audit for compare configuration?

Thanks!

(PA-3020, v6.1.4)

Failed to create config file!

PAN-OS 10.2.11 Device -> Setup page missing

Hello!

I just upgraded my PA-220 to PAN-OS 10.2.11 and the Device -> Setup page is missing. (See attached photo). Has anyone else run into this or is it a browser setting on my PC?

Typo'd a serial number and unable to remove from account

I have never touched a firewall until today. I added my serial number to our account and put a 6 instead of a 5 for one of the numbers. It took the devices serial number and that device is now in our account. I added the second, correct one to our ac

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

Anydesk issue.

Hi everyone!
I have some issues with anydesk application. It has ssl issue because of decryption, I think.

I've added *.anydesk.com ind 'SSL decryption exclusion', but it didn't worked.

Maybe some of you have faced such kind of issue?

Thanks in advance!

Blocking RDWeb brute force attempts

Hi,

we have a customer that's under a slow brute force attempt by a persistent party. Blocked their IP several times, but they switched and even started using multiple addresses at the same time now.

It's doing around 3 to 4 attempts per second per

Superuser (read-only) Not authorized to access

Hi everyone,

I am trying to get TACACS working between our PA and Aruba Clearpass authentication server. I have successfully done this for full admin as well as a custom role on the firewall. I am however running into issues with a service account

How do I get a website's risk level lowered, since we know it is safe?

Earlier this week, I submitted a website that was blocked because it was categorized as malware incorrectly.  This was corrected very quickly. Now that same website is blocked because it is listed as "high risk".  We know that it is not. When I tried

Intermittent UserID - Syslog Parser -

Anyone see this behavior? we are using syslog parser string for userid, no logout action, timeout set to 45 minutes ( default). You can see here that a flow within the same second shows a userid and then blank with same source address. FW running 10.

Active Directory groups w/ members from multiple domains

I'm using AD groups for some security policies and am expanding to use other domains in our company. While I can add users from another domain into an AD group, the PA only shows me the users in the same domain as the group.  For example:

Domain 1: DC