Discover LIVEcommunity — Watch Now

  • 489,672 Members
  • 752 Online
  • 170,731 Posts
  • 17,997 Solutions
  • 50,431 Likes
🔥 We are nominated in 4 CMX Community Industry Award categories! 🔥
Cast your vote now and be part of our journey to victory!

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Rapid connecting/disconnecting after some time

Hi, I was wondering if anyone can shed some light on the issue I am having with GP. This is happening to all users but I haven't been able to find out yet WHEN does it start (but it's weeks/months after the temp fix). When it starts, GP starts rapidly connecting and disconnecting every 1-2 seconds (the connection is established but straight ahea...

Use of Azure service Tags in Cloud NGFW rules

Hi, can anyone advise if it will be possible to use Azure service tags in the Cloud NGWF rule base? We currently run a VM and use external dynamic lists for this, but I don't see an option to do that in GUI so far. Note we are not using Panorama at present, so maybe it is possible with that, but would be good to know if we can use service tags ...

Resolved! Azure NGFW VNet Deployment - No Outbound Internet Access

Deployed a NGFW deployment for a customer. Using the VNet deployment, not VWAN. Everything is green (DG and Template) and healthy from the Panorama aspect. We have created a UDR in a test application VNET, that points only a default route to the NGFW firewalls.East/West connectivity works great. We are also able to access everything across the e...

Azure Cloud NGFW

In the doco I see that Cloud NGFW for Azure can automatically scale to 40 instances and support 100Gbps in a vNet. I do not see any details for the config of autoscaling. Do I need to configure the autoscaling or does it just happen?

Syncing Specific Entra ID Groups to Cloud Identity Engine

We are planning to integrate CIE with Entra ID to map and authenticate GlobalProtect users. However, after completing the configuration, we observed that all users from Entra ID were synced to the CIE side, even though a filter was configured to include only users from a specific group. Could someone please assist us in understanding why this is...

CPU and Memory Usage

Hello everyone, I’m looking for an XQL query that shows CPU and memory usage.For example, I want to visualize something like: the XDR service consumes an average of X% memory and Y% CPU per hour, preferably as a graph. Could you please help with this?

Cloud NGFW Versus VM-Series: Comparison Chart

13 min read

Find out how Palo Alto Networks’ Cloud NGFW for AWS and VM-Series compare when it comes to elevating your security posture. (Updated on December 2025) NGFW Deployment & Management Description Cloud NGFW for AWS VM-Series Native Management Panorama Management Strata Cloud Manager Cloud-Native Cloud NGFW for AWS is a cloud-n...

vkannan by L2 Linker
  • 24994 Views
  • 4 replies
  • 6 Likes

Excel downloads being blocked

In the last couple of days we've been getting reports from multiple users that they are being blocked from downloading .xlsx files from a cloud service. I can see that there are multiple entries in the Data Filtering log for each file, and then final one is showing a Threat ID of BIN file and being denied. Anyone seen anything similar?

Peter_Neville_0-1766139340125.png

Max number of units (aeX.Y subinterfaces) supported under a single AE interface?

Hi Team, I’m looking to confirm the maximum number of units (aeX.Y subinterfaces) that can be configured under a single Aggregate Ethernet (AE) interface on Palo Alto firewalls. Specifically for models like PA-440,PA-450, PA-820, and PA-850, and across recent PAN-OS versions: • What is the hard platform limit for aeX.Y units per AE?• Are there a...

VivekMs by L1 Bithead
  • 142 Views
  • 1 replies
  • 0 Likes

Windows-Remote-Management & Implicit Use of Web-Browsing

I need your help with understanding this. We've got a rule that was intermittently working. We built a rule around the use of "windows-remote-management" which is using the standard port of 5985/tcp. The rule is a service "application-default" rule. When we look through the logs we see that some of the traffic that should be matching this...

Brandon_Wertz_0-1766598734776.png

Advanced Authentication Cortex API

Does anybody have any examples of how they have implemented Advanced Auth for the Cortex APII only have PowerShell available examples using that that would be preferred, but I can probably interpret most scripting languages.If not examples, maybe links to articles discussing the process to implement it more generally.Cortex XDR

Resolved! Cortex XDR manager upgrade

Hello, In October, our XDR manager console displayed a pop-up window regarding "Cortex XDR 4.X is now available" with the possibility to upgrade before end of February 2026. We did not choose to upgrade at that time. How can we upgrade now ? Can we do it alone or it require a support case ? Thank you for your help. Thomas

Cloud NGFW Credits issue

Hello All,I recently purchased Cloud NGFW for azure and purchased paloalto credits as well.my Azure NGFW shows as PAYG ( Pay us you go) instead of showing license with my credit.is it possible to change my PAYG license to credit based.

M.vyas by L0 Member
  • 1213 Views
  • 6 replies
  • 0 Likes

Upcoming Fuel Events

Top Contributors

Latest from our Blog

Why, Where and How of PQC Cipher Translation Proxy

This blog was written by Saad Khan, Sr. Technical Marketing Engineer Why is the translation of ciphers to be "quantum-safe" a necessity? The cybersecurity landscape is rapidly evolving, driven by the ...

0 Comments