Paloalto Firewall routing problem

I am configuring a new AP-850. MGT port works fine and I can access the Internet. Now, I configure ethernet1/1 to access the Internet. 

pa-5.JPG

I also configure the routing. But can’t ping 8.8.8.8. Do I miss something or how do I troubleshoot it?

pa-6.JPG

Troubleshooting: 1. Make sure Virtual router is setup correctly.

2. Make sure Policies>Security is setup correctly.

3. Make sure Policies>NAT is setup correctly.

Please view this step by step vidoe:

Can’t ping FQDN in Paloalto Firewall

Case 1: The client re-configured their new Windows DC and PA-850 Firewall. He can ping a public IP address, but not Full Qualify Domain Name

Troubleshooting: We run show deviceconfig system dns-setting config command to check the DNS settings, it shows 10.0.0.84 and 10.0.0.73, which are older DNS serer IP addresses. Replacing them with the new DNS IP addresses fixes the problem.

Case 2: The client just changes their IPS. They have a problem to access the Internet.

When the client checks the DNS settings on PA-850, it looks good.

Troubleshooting: In reviewing their configuration on PA-850, they still keep the old IPS IP address just in a case they need to switch back.

In this situation, we need to re-configure the DNS service on PA-850.

* Go to Device>Setup>Services

•Click Services Route Configuration under Services.

•Check Customize

•Click on DNS

* Select the new IPS IP Address which you are using, which x.x.x.124/28 in our example.

Now, you should be able to ping FQDN.

Tips: We can use these command lines to check the DNS status.

  1. Enable configuration mode

set cli config-output-format set
configure

2. Run these commands:

Show deviceconfig system dns-setting

Show deviceconfig

Show deviceconfig show session all filter application dns

Please view this step by step video:

https://youtu.be/kq3lpOUobrE

How to modify DNS IP address on Paloalto Firewall

The client just migrated their DNS to a different server using a different IP address. This article shows how to modify the DNS Server on Paloalto Firewall based on PA-850.

1.Login PA-850.

2.Go to Device>Setup>Services.

3.Click on Settings icon.

4. You can modify the DNS Server here.

5. Click OK to close.

6. Click the Commit to save the configuration

Please view this step by step video:

Why do I receive Error Code 0xC004E028 when activating Windows 2019?

If you are receiving error code 0xC004E028 when trying to activate your Windows it means that your computer is already in the process of activation. During the activation process, Windows sends out the Key to Microsoft servers to validate it.

Sometimes validation takes a long time, and if you try to activate it again, you will receive this error code 0xC004E028. Wait for a few more seconds you should be fine.

Fixing “We Need You To Fix Your Microsoft Account (most likely your password changed)”

When login Windows 10 PC, you may receive a pop-up message saying “Microsoft account problem. We need to fix your Microsoft account. (Most likely your password changed). Select here to fix it in shared experiences settings.“ This article shows some cases with resolutions we have been working on this message.

Case 1: The client gets this “Microsoft account problem. We need to fix your Microsoft account” message when he logs in Windows 10 using Microsoft account.

Resolution: Login local user account and check the account settings.

* If you don’t have local account, cerate one by going to Settings>Account.

•Click Family & other users on the left pane.

•Under Other users, click on Add someone else to this PC.

* Click I don’t have this person’s sign-in information.

  • Click on Add a user without a Microsoft account.

* Enter the username, password, and follow the wizard to complete the settings.

•After login the user account, go to Settings>Account to check the account status.

•Then re-login Microsoft account.

Case 2: The client gets this message after sharing a folder.

Resolution: Go to Settings > System > Shared Experiences. Turn off Share across devices. Or Select My Devices only if it is on.

Case 3: Run the Microsoft Account Troubleshooter to automatically resolve the issue.

Click link below or search download the MS account troubleshooter

http://download.microsoft.com/download/F/2/4/F24D0C03-4181-4E5B-A23B-5C3A6B5974E3/microsoftaccounts.diagcab

* After the download, run the application and follow the wizard

Microsoft Account Troubleshooter may fix the following issues:

Corrupt Microsoft Account settings

Can’t connect to the sync service

Problems with Microsoft account Policy

Microsoft Account required

Connection issues due to proxy or certificate issues

Check for roaming GPO enabled status

Problem with system registration

Signed in with a guest account, or Roaming User Profiles enabled

You are not connected to the Internet

Proxy Settings

You have reached your daily sync quote

Sync your settings is turned off Check system not activated.

Case 4: Verify your identity on your Windows 10 PC.

•Go to Settings > Accounts.

•In Verify your identity to sync passwords across your devices, click Verify.

* Select the security code to be sent to you.

* Follow the wizard to complete the verification process.

Case 5: We help client fixing this issue by installing the Windows latest update

Case 6: Change or reset the sign-in option.

•If you use Windows Hello PIN to login, you may want to change to Password or reset the PIN.

•After you change to password login or reset the PIN, try to use the PIN again.

Please view this step by step video:

Troubleshoot “This app can’t run on your PC”

When running a app in Windows 10, you may receive this message: “This app can’t run on your PC”. This article shows all our case collections with resolutions.

1.Run Windows Store Apps Troubleshooter

Whenever you receive the “This App Can’t Open” error message in Microsoft store, one of the effective resolutions is to run the Windows Store Apps Troubleshooter, which could scan your system and detect the issues that might be preventing any Windows Store apps from working correctly. To run the Windows Store Apps Troubleshooter, take the following steps:

* Click the Start menu, and then type troubleshooting in the search field

* Click on Open

* Click on Additional troubleshooters

* Click Windows Store Apps from the listed results to open it

* Click on Run the troubleshooter

* Reset an app by clicking Open Apps & features.

* The troubleshooter will run and may fix the problem

2. Change UAC Settings

* Type UAC in Search bar, click on Change User Account Control settings.
•Move the scale down for a test.

•When to be notified about changes to your computer, and click OK

•Reboot your computer and then test to run the app.

3. Install latest Windows update.

•Check the Windows Update statues. It may be pending for restart or need to download/install.

•Click Settings>Update & Security

4. Re-install/Repair or upgrade the app.

•Go to Control Panel to Repair, uninstall/Re-install the app.

5. Re-register Windows Store through Windows PowerShell

Step 1. Click the Start menu, and then type powershell in the search field

Step 2. Right-click on Windows PowerShell from a list of results

Step 3. Click on Run as Administrator

Step 4. Click Yes in the popup.

Step 5. In the Windows PowerShell window, type the following command and then hit Enter

Get-AppXPackage -AllUsers | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\AppXManifest.xml”}

Step 6. Your Windows Store will be re-registered once it is finished, test the app.

6. Change ownership of your C: drive

Sometimes Windows 10 apps won’t open due to ownership problems, but you can easily fix that. To change the ownership of a folder, or a hard drive partition, do the following:
* Open This PC and locate the drive where Windows 10 is installed. By default it should be C.
* Right click the drive and choose Properties.
* Go to Security tab and click the Advanced button.

* Find Owner section and click Change.

* In Select User or Group page, type the username or group name. or click Advanced button.

* Click Find Now button. List of users and user groups will appear. Select the Administrators group and click OK.

* In Select User or Group window click OK.
select-users-or-group
* In Advanced Security Settings window owner should be changed to Administrators and Administrators group should be added to Permission entries list. Check Replace owner on subcontainers and objects.
replace-owner
* Click Apply and OK. Wait for the process to complete.

7. Try different account.

•In some cases, the account can’t run an app because the account profile has been damaged. Try different account or create a new account to run the app.

•You can go to Settings>Account to create a new account.

8. Make sure the app is compatible with Windows OS

Case 1: If the app is 32 bit running on Windows 10 64 bit, you may receive this message: Windows protect your PC.

Resolution: Click Run anyway.

Case 2: A old app was designed for Windows XP.

Resolution: Right click the executable file. Select Properties. On the Compatibility tab, check Run this program in compatibility mode for, and then select Windows XP.

9. Download the program in local drive.

•We had a case. The client can’t install the Adobe Acrobat over VPN connection.

•Resolution: Download the adobe Acrobat to the local C drive download folder and install it.

10. Enable App Side-loading

To enable app side-loading, do the following:

1.Open Settings app and navigate to Update & Security section.

2.Go to For developers page turn on Developer mode.

11. Update Windows Store

1.Open the Microsoft Store app from the Start menu.

2.Click on the 3-dot menu in the far right corner and open Downloads and updates.

3.Click on the Get Updates button.

Please view this step by step video:

Troubleshoot Microsoft Account Issues

Situation: the user has a problem to login using Microsoft Account.

Troubleshooting:

Download Troubleshoot Microsoft Account tool

Run it from your local computer.

Follow the wizard

Microsoft Account Troubleshooter may fix the following issues

Corrupt Microsoft Account settings

Can’t connect to the sync service

Problems with Microsoft account Policy

Microsoft Account required

Connection issues due to proxy or certificate issues

Check for roaming GPO enabled status

Problem with system registration

Signed in with a guest account, or Roaming User Profiles enabled

You are not connected to the Internet

Proxy Settings

You have reached your daily sync quote

Sync your settings is turned off Check system not activated.

Fixing windows login error: Illegal state change request

Situation: When the user tries to sign in his Windows 10 computer or link to Office apps, he receives this message: “We couldn’t sign you in. An illegal state change was requested”. This article shows many case collections with resolutions.

Case 1: When using Microsoft account to ling windows 10, the client can’t login with “An illegal state change was requested “

Resolution: It could be the Internet issue. Try to login using local administrator account.

* After login, check the Internet connection.

Case 2: Can’t login with “An illegal state change was requested “

Resolution: The password may be expired; the account has been disabled or removed. Try to login using different account.

•After login different user, check the account status by going to Settings>Accounts.

* Click on Emails & accounts->Manage

Case 3: Can’t login local account with “An illegal state change was requested “

Troubleshoot and Resolution: Login different user account and check any errors in Event Viewer. We find this error: Event ID: 1500, Description:

Windows cannot log you on because your profile cannot be loaded. The account has been damaged. Create a new account.

Case 4: Can’t login Outlook with “An illegal state change was requested”
Resolution: Reset Microsoft account.

•After login different user, check the account status by going to Settings>Accounts.

•Click on Emails & accounts->Manage

Case 5: Can’t login with “An illegal state change was requested” and no other admin account available to login.

Resolution: Restart your device into safe mode and sign in with your account. Check to any errors in the event viewer.

Restart your device in normal mode and sign in again with the account.

You may have multiple options to run Windows 10 Safe Mode.

1. Use “Startup Settings” in Windows 10 installation DVD or USB recovery drive. Boot from Windows 10 installation DVD or USB recovery drive.

2. Interrupt the normal boot process of Windows 10 three times. If Windows 10 fails to boot normally three times over, the fourth time it enters by default in an Automatic Repair mode. Using this mode, you can boot into Safe Mode.

Case 6: Can’t login Microsoft account with “An illegal state change was requested” and no other admin account available to login.

Resolution: Click link below or search download the MS account troubleshooter

http://download.microsoft.com/download/F/2/4/F24D0C03-4181-4E5B-A23B-5C3A6B5974E3/microsoftaccounts.diagcab

it again

* After the download, run the application and follow the wizard

Microsoft Account Troubleshooter may fix the following issues:

Corrupt Microsoft Account settings

Can’t connect to the sync service

Problems with Microsoft account Policy

Microsoft Account required

Connection issues due to proxy or certificate issues

Check for roaming GPO enabled status

Problem with system registration

Signed in with a guest account, or Roaming User Profiles enabled

You are not connected to the Internet

Proxy Settings

You have reached your daily sync quote

Sync your settings is turned off Check system not activated.

Case 7: The client can’t login his Xbox live account with “We are unable to sign you in to Xbox Live” and “An Illegal state change was requested.“

Cause: Too many log in attempts on multiple systems.

Resolution: try different or original device which you login before to login.

Resolution: Contact us page: https://beta.support.xbox.com/contact-us
Enforcement: enforcement.xbox.com
Ports: https://beta.support.xbox.com/help/hardware-network/connect-network/network-ports-used-xbox-live

Please view this step by step video:

Microsoft Word is processing forever

Situation: When the client tries to open a word document or just open Word, it shows Processing forever and never open the word.

This article shows how to fix this problem.

Resolution 1: Repair Microsoft 365

•Open Control Panel.

•Go to Programs and Features.

•Highlight the Microsoft 365 Apps

•Click on Change.

* In popup, click Yes.

•You will have two options: Quick Repair and Online Repair.

•Try Quick Repair first.

•If the Quick Repair doesn’t fix the problem, then try Online Repair which may take half hour.

Resolution2:ResetMicrosoft365

If you don’t have Microsoft 365 in Control Panel>Programs & Fearers, you may try Reset Office 365.

•Type Office in Search bar, and select App settings

In Office page, move down. You will have RepairReset and Uninstall options.

Resolution 3: Re-install Microsoft 365

If above two resolutions don’t fix the problem or you don’t have Uninstall option.  Please try these steps.

•Go to Settings>Apps>Apps & Features. Double click on Microsoft Office Desktop Apps.

•Click Uninstall.

In popup, click Uninstall.

•Now, re-install Office 365.

•Login office 365.

•Click Install Office.

* You will have two options: Office 365 apps and Other install options such as select a different language, 32 bit Office or individual app.

•Follow the wizard to complete the installation.

•Test the Word.  

Please view this step by step video:

Fixing Microsoft Word is not responding

Situation: When the client tries to open a word document or just open Word, he receives this error: Microsoft Word is not responding.

This article shows how to fix this problem.

Resolution 1: Repair Microsoft 365

•Open Control Panel.

•Go to Programs and Features.

•Highlight the Microsoft 365 Apps

•Click on Change.

* In popup, click Yes.

•You will have two options: Quick Repair and Online Repair.

•Try Quick Repair first.

•If the Quick Repair doesn’t fix the problem, then try Online Repair which may take half hour.

Resolution 2: Reset Microsoft 365

If you don’t have Microsoft 365 in Control Panel>Programs & Fearers, you may try Reset Office 365.

•Type Office in Search bar, and select App settings

In Office page, move down. You will have Repair, Reset and Uninstall options.

Resolution 3: Re-install Microsoft 365

If above two resolutions don’t fix the problem or you don’t have Uninstall option.  Please try these steps.

•Go to Settings>Apps>Apps & Features. Double click on Microsoft Office Desktop Apps.

•Click Uninstall.

In popup, click Uninstall.

•Now, re-install Office 365.

•Login office 365.

•Click Install Office.

* You will have two options: Office 365 apps and Other install options such as select a different language, 32 bit Office or individual app.

•Follow the wizard to complete the installation.

•Test the Word.  

Please view this step by step video: