Dear community! We are currently experiencing an issue where after authenticating to the globalprotect portal page with the browser, we get the following message :"“Your login session has expired and you have been logged out for security reasons...” And we cannot get to the portal page. It only works with Mozilla firefox or Edge in IE compa...
We notice SLS subscription on my PA440 but we did not purchase a separate SLS sub. We only have Coresec Bndl with Premium support. Upon Checking my CSP there is no SLS license. Do anyone experience the same thing? Thank you.
Hi all, I'm running into a persistent annoyance with the GlobalProtect Linux client. Environment:- GlobalProtect version: 6.2.9-407- OS: Ubuntu (kernel 6.17.0-35-generic, 24.04-based)- Architecture: x86_64 Issue:Every time the GlobalProtect client starts, it creates a folder named `GP_HTML` directly in my home directory (`~/GP_HTML`). This happe...
Hi everyone, With the industry moving toward shorter validity periods for publicly issued SSL/TLS certificates, I'm trying to plan ahead for certificate management on our Palo Alto firewalls. We have several firewalls that are managed through Panorama, and some of them will also be using SAML for authentication. Since public certificates will ne...
Looking for sizing advice from anyone running PAN at a university/campus internet edge. Environment: University with 4,000–5,000 students plus staff/faculty Current internet bandwidth: 3 Gbps — expect this to grow substantially over the appliance's life (bandwidth per student keeps climbing; wouldn't be surprised to hit 8–10 Gbps by end of life...
Hi everyone, we are currently trying to set up a syslog server as we would want to retain older logs in case we need it for auditing purposes. We are looking for a free one that's good in 2026. I'm currently choosing between an ELK stack and Wazuh, which would be easier? I have experience in setting up Docker containers. Was looking at Graylogs ...
Hello DearsI am trying to install Global protect VPN on Android device, but it is unable to processed with that since the certificate is self sign so any other way to solve that problem without replace the current certificate meaning change setting on Andriod device. Best Regards
With the pending move of publicly issued certificates to a shorter time frame, is there anyway to ease the amount of effort to get the new certificates installed on the firewalls since it will now need to be done multiple times a year? Working on a few that will using SAML for authentication and be managed by Panorama so trying to see the best ...
I guess the Cortex Data Lake is now the Strata Data Lake. My question is what would be an appropriate XML query to generate a list of Incident IDs for a particular time frame from the Data Lake?
Hi all, I've run into something confusing in Panorama and wanted to check if this is expected behavior or a bug on my end. When I go to the Policies tab, I can select Device Group: Shared from the dropdown without any issue. However, when I switch to the Objects tab and open the Device Group selector there, "Shared" is not listed at all — I can'...
We have setup wherein user get certificate base authentication on pre logon(machine authentication), When user logged into machine, it must shift from machine name to userid. this transition is not happening. We also don;t require GP client login window popup. It must derive userid and password from windows login. Authentication table we have LD...
Hi team, We are currently encountering a mass upgrade failure across multiple endpoints during both Auto Upgrade and Manual Server Upgrade attempts. While a single endpoint successfully upgraded using our standard profile and group configuration, the remaining endpoints consistently fail. Issue Summary: Symptom: The upgrade tasks transition to...
Has anyone done this to date? Eventhough we are running version 31.0.58 (latest at the current time) is there an easy way to determine if running Ubuntu without having to Live terminal to the BVM? (waiting on client to open 'https://lrc-<region>.paloaltonetworks.com' to enable live terminal access) https://docs-cortex.paloaltonetworks.co...
What do “Restricted” and “Public” actually mean in an XSIAM report template? If I set the report template I created to “Restricted,” does that mean I won’t be able to schedule the report to be sent to an external email address, and that it will only work when I manually generate it within XSIAM?
CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent, this vulnerability bulletin was released a few days ago, so while reviewing Prisma Access vulnerabilities, we wanted to confirm if the vendor has announced any upcoming dates for the Central Mexico, West Mexico, and US South regions, as the bulletins don't me...
