Intermittent inet connectivity after updating to 10.2.8-h3

We're currently running on 10.2.3-h9 (PA-440's in HA pair Active/Passive) with remediation steps put in place for CVE-2024-3400 and Telemetry disabled. 

We attempted to migrate to 10.2.8-h3 as it is listed as a preferred release and fix for the CVE a

ISP Line traffic

We possess a set of PA devices configured with two ISP lines operating in an Active-Backup setup. Our objective is to permit email traffic to flow through the backup line as well, as we receive emails on both lines. However, we're encountering a prob

Radius Authentication Profile

hello 

I am configuring a GP gateway for Radius Authentication 

I am using the CLI test authentication command to test 

I can ping the Radius host and confirmed Secret 

my troubleshooting shows packets allowed by the Security policy 

I cannot see any

Has anyone configured and tested the new functionality within Pan OS 11.0 Web Proxy in Transparent mode?

Hi team,

I've set up the Web proxy in transparent mode, but I'm unsure of its functioning. Our Palo Alto device doesn't support WCCP and only allows Inline mode deployment. With only the admin guide available for reference and study, I may be the sol

Question above Forward Proxy Decryption implementation

Greeting all,

I've tinkered with Forward Proxy Decryption a bit in the past and I want to revisit this for a limited rollout to our servers at least.  My previous experimentation into the feature was for a Windows client so I understand the basics

Palo Alto Login issue though GUI " ERR_SSL_KEY_USAGE_INCOMPATIBLE " (Solved)

For the last few days, we have been experiencing an issue with logging in to the Palo Alto Firewall through the GUI. We are getting the below error from the browser during login.

Not able to check now new content for dynamic updates

We are trying to update dynamic updates but unable to do so. 
I show errors as attached when tried to check online. 
Also, we tried using manual upload but it keep trying to upload without success. 
Please advise if anything we can do.

Issues in PAN-OS 10.1.13

Dear All,

Did anyone installed the version 10.1.13, Can you please share your feedbacks regarding this version.

Device Telemetry is Showing Invalid Regions

Hi Friends,

Recently one of our customer has faced some issue in their firewall internally due to which they had to perform a factory reset.

After getting back the device up and fine we found a issue where commit is getting failed with Invalid Tele

VPN Performance over Prisma Access : slow downloads

Hi,

Can somebody tell met what you can expect from downloading a file over prisma access backbone.

Our datacenter is connected to service connection and when I try to download a 200 Mbps file from the datacenter to a remote network located in the s

Palo Alto - previous software disappeared after uploading 11.1.0-h3 version

Hello,

I wanted to update out Palo Alto 440 to a newer version and manually uploaded the 11.1.0-h3, however afterwards I can't see the previously uploaded softwares. When I checked in cli, they show up but with size 0 and I can't reupload any of them

Should I override the intrazone-default to deny?

TL;DR: yes, almost always.

We've had plenty of discussions on the behaviour of this default rule, and published Security Policy Rule Best Practices (paloaltonetworks.com) which provide guidance for logging. We've even discussed the results of these

Firewall PA-850

Hello all,

Could you please give me correct US and EU ECCN for PA-850?

Thank you in advance.

Best regards,