Hi Team, Has anyone created GRE tunnels to Zscaler or anyother third party from a Palo Alto firewall in Azure or GCP? I tried and didn't work and bit of research seem to suggest that Palo Alto doesn't support GRE behind NAT ( Azure or GCP you can't assign public IP directly to the firewall interface and NAT is done by them)
Attention: Global TPM team, Hello Team, I would like to confirm the operational and performance impact of the following features introduced in PAN-OS 12.1.2: 1. Brotli-compressed content inspection using the Content-Based Threat Detection (CTD) engine 2. Dedicated DNS Security log type for improved DNS visibility Could you please advise on...
Hi Team, I have deployed VM series firewalls in GCP with 3x NICs ( mgmt, untrust, trust) I have private subnets assigned for all subnets and mgmt and untrust interfaces have an public IP attached to it. Problem I have is I'm unable access Internet via vm-series firewalls, using its untrust public IP. Internet works if I use the next-hop for my...
Is there any way to force Packet Capture to run for extended lengths? Since 11.1 PaloAlto has changed the underlying config and now forces packet capture to automatically end after 60 seconds. It's like no one at PaloAlto has ever used packet capture or had to track down an intermittent problem. The time limit can partially be increased with t...
Hi, I need to throttle 2 BYOD VLANs. On the Palos, they are configured as a sub-interface of aggregate ports. The QoS option will only accept physical interfaces or the aggregate port, not sub-interfaces to the aggregate port. Is there a way to accomplish this? There doesn't appear to be. More information all the firewalls are managed b...
Hello All, How can I to get additional virtual systems for my PA-3440? Is PAN-PA-3440-VSYS-10 the only valid license? Is there any other license with less VSYS available?BR Andrzej
I have checked the purchase documentation, which states that the license validity period is from December 24, 2025, to December 23, 2026. However, the firewall displays a Date Issued of July 2, 2026, and an Expiration Date of June 17, 2029. Please note that no license renewal has been performed to date, and the next license renewal is scheduled...
Attention: Global TPM Team Hello Team, General product behavior question. When using "Sync to HA Peer" to synchronize a PAN-OS software image to an HA peer, are there any known service impacts or operational impacts (traffic forwarding, session handling, HA operation, management-plane performance, etc.) during the synchronization process? ...
We recently deployed a Palo Alto Networks firewall and, as part of the implementation, received 200 Prisma Access licenses. I also requested an Enterprise DLP license for evaluation/testing, which has now been activated. Currently, we have access to the following components: Strata Cloud Manager Strata Logging Service Enterprise DLP Data Securi...
What is device control violation id notifies in Cortex XDR device violations (Public API) .. what it is its significance ?
Hi kiwi idk if your busy or not but i would like to use your help on how to log out of global protect
Hi Team, We’ve just finished deploying Cortex XDR and Prisma Browser across all endpoints for a customer. I’ve seen a few blogs mentioning an integration between the two that provides enhanced security event visibility, including browser data. Has anyone implemented this integration? Is it available, and if so, how can it be set up? Regard...
Hello, I have a few questions regarding the Custom Scan functionality on Windows endpoints, and I have not been able to find the answers in the available documentation. First, I understand that Custom Scan has a limit of 100 items per scan. However, I have noticed some unexpected behavior when running scans: When I select only one file, the el...
Attention: Global TPM TeamHello Team, This is a general product behavior question. No configuration review or TSF analysis is required. Question 1 With SSL Inbound Inspection enabled, is the following deployment supported? Client ↓ HTTPS PA-440 ↓ HTTP BIG-IP (AWAF) ↓ HTTP Web Server Can PA-440 forward traffic as plain HTTP after decryp...
Attention: Global TPM TeamHello Team, I am reviewing PAN-OS packet processing behavior related to Security Policy and Decryption Policy evaluation. Based on the public documentation below, I understand that Security Policy lookup occurs during session setup and that traffic matching a Decryption Policy can be decrypted for further inspection...
