General Topics

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

Customer Support Portal Overview
License Management
RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

...

Ensuring a Safe and Secure Community: How You Can Help

Dear LIVEcommunity Members,

Ensuring a top-tier experience on LIVEcommunity and protecting our members’ safety and security is our top priority! To this end, we have implemented additional security measures to safeguard our vibrant global commun

...

Introducing the LIVEcommunity Support FAQ: Your Valuable Customer Resource

LIVEcommunity is thrilled to introduce its new Support FAQ section, designed to help Palo Alto Networks customers quickly resolve their common queries.

You'll find this new area under the Articles section of the main menu:

Our goal is simple:

...

Does Palo Alto support Reverse Route injection?

As title, does Palo Alto support something like CISCO "Reverse Route injection" which can inject a /32 route to the campus network for a dial-in user? Or can I create a /24 loopback interface for VPN users and redistribute the /24 to campus network?

...

Slow Network Traffic Using Global Protect

Hi,

We are experiencing high latency when using Global Protect. It peaks to 1000ms. We tried to use Cisco VPN to isolate the problem and latency peaks at 90ms. We removed security profiles that may cause latency but it did not work. We also noticed

...

Automation of a vsys configuration

We would like to automate the configuration of a new vsys, uisng inputs from a file or script with the required information, using either the set commands or the API.

Has anyone attempted to do this, and what is the best way and how to gather the req

...

Resolved! Allow one URL out of many sharing an IP

We're faced with a bit of a challenge. We blocked a GoDaddy-Hosting IP for sending malicious traffic to our campus. Faculty later complained that a site they rely on is hosted with the same IP. I've attempted many different configurations with IP fil

...

After password complexity change local admin account cannot log in

Hi.

We changed our password complexity on pan os 7.0.2 and after commit the local super users cannot log in. Is there a way to recover from this other than with a serial cable?

Web UI authentication LDAP fails

Hi All,

I have configured everything correct. But no entry in LDAP server security logs while I try to login paloalto Web UI using LDAP profile.

Here at pan I can retrieve the all group user. I have configured the auth.

Profile to 'all' entry i

...

Adding Tag Information to Email Alerts

Currently we have our Security Policies setup in a way that the name of the rule is the server and the tag identifies what resource is being accessed (URL). As it is when I receive an alert of malicious intent on a rule it sends me the Rule name and

...

Using packet capture to view DHCP discover , offer , request and ACK packet

how can we view DHCP discover , offer , request and ACK packet

Thanks in advance,

Resolved! Virtual PA

Is there a URL that can I can download a evaluation Virtual PA from so that I can try a few configuration on it

rather than trying it on the live physical appliance.

Resolved! Network requirements for HA clustering

Hello,

is there any document that describes network requirements for clustering two firewalls. Especially how far apart two firewall can be (latency, delay etc.)
Is there any design scenario where two firewalls on two different sites can be clustered

...

Resolved! HTTP Headers in Threat Log?

Hi,

is there any possibility to see the HTTP Headers in Threat Log? For example i want to protect a shared hosting environment and on the threat log ( vulnerability profile, WordPress Login BruteForce Attempt) i can only see "wp-login.php" as the "

...

Resolved! GlobalProtect with 2 NICs

Here is an interesting question:

If a system has two fully configured NICs with internet connectivity, which interface does GlobalProtect use establish its connection to a Palo Alto gateway? How can we select which NIC it uses? Is it something th

...

Wildfire - diference between the public-cloud and default-cloud

Hi

In the option "wildfire->wildfrire server" what is the difference between the default-cloud and the public-cloud. Also, what are the best practices for these two options.

Regards

Security Profile Groups - How To Filter/Search in Security Policies

So I know you can search for individual AV profiles, URL etc. etc. but I want to search for Security Profile GROUPS in Security Policy screen. You can search on the Security Policy screen 'profile-setting/profiles/virus/member eq My-Virus-Profile' s

...

PA 5050 to N5K 10G Conn

Hi Guys,

I am facing an issue, links are not coming up b/w the PA and the N5K and both are 10G Ports. In PA, we should keep the link speed as auto and in N5K, there is no option to set the 10G port link status to Auto,

Have anybody faced this iss

...

Discussions