• 527,092 Members
  • 1,023 Online
  • 1,132,130 Posts
  • 19,744 Solutions
  • 53,586 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

How to block all AI-based applications

Hi Team, 1) We have a customer who wants to block all AI-based applications but the applications are not getting blocked.2) Initially, we created a application group policy in Security Policy and added all AI-based applications with action as deny. After commit the AI applications were getting blocked successfully. However, Claude AI was still a...

Palo Alto 1420 - Invalid username or password.

Dear all, We have face an issue recently with our Palo Alto HA pair. When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all. The only recent change we have implemented was the CIS Device H...

Issues with connectivity between HA PAs and Nexus Leaf Switches

I've inherited a setup which has PAs with two vsys each connecting:external switch/router > PA external vsys > A10 Load Balancers > PA internal vsys > Cisco Nexus Leaf switches We run a full mesh setup (1x interface from each side of the PA HA pair to each (upstream switch, external A10, internal A10) internal device, both primary an...

rmeskill by • L0 Member
  • 225 Views
  • 2 replies
  • 0 Likes

empty HIP after last Microsoft updates (09.2026)

Hi, Following the recent Microsoft updates KB5124008 and KB5126052, we have observed a significant issue with GlobalProtect’s operation, manifested by the transmission of empty or invalid HIPs. PANOS version 10.2.16-h6 (but also on 11.2.10-h13—I was in the middle of the update but rolled back to limit its impact). GP client version—primarily 6.3...

JacekL by • L2 Linker
  • 917 Views
  • 6 replies
  • 0 Likes

VM-Series License Renewal Display Behavior

Attention: Global TPM TeamHello Team, Could you help clarify the expected behavior of VM-Series license renewal and license expiration date display? Environment:- Product: VM-Series- PAN-OS: 11.1 Example: Current license:- Date Issued: Nov 14, 2025- Date Expires: Nov 14, 2026 Renewal license:- Contract period: Nov 15, 2026 - Nov 14, 2027 Our u...

VPN Issues with SAP

I got intermitent connection affecting production PA-5220 VERSION 11.1.13 . Global protect 6.2.8-1045 troubleshooting : The VPN tunnel temporarily disconnected and routing entries associated with the tunnel were removed. The GlobalProtect client subsequently recreated and reconfigured the virtual adapter. A new IP address assignment was re...

F.Pinar by • L3 Networker
  • 92 Views
  • 1 replies
  • 0 Likes

the Maintenance support for Palo Alto Networks hardware components

In Japan, the maintenance support SKUs for the PAN-PWR-450W-AC (spare 450W power supply for PA-3400, PA-1400, ION 5200, and ION 9200) and the PAN-SFP-PLUS-SR (SFP+ form factor, SR 10Gb optical transceiver, 300m short reach, OM3 MMF, duplex LC, IEEE 802.3ae 10GBASE-SR compliant) are ZAPA-PWR-450W-AC-BS1 and ZAPA-SFP-P-SR-BS1, respectively.However...

Website blocked automatically by the firewall

I am using PA-410. In our network, one specific website is blocked automatically by the firewall. I created a URL filtering, added URLs to the whitelist, and allow in the profile. Nevertheless, users cannot access the website. When I monitor the traffic, there is "undecided" in front of the application. End Reason is unknown. State is Active.Cou...

gdu_palo by • L1 Bithead
  • 294 Views
  • 6 replies
  • 0 Likes

Undecided application

In our environment, some webpages are not accessible. (This site can’t be reached) When I monitor the session browser, there is "undecided" in the Application column. I have attached the screenshot. Please help me to solve this issue.

gdu_palo by • L1 Bithead
  • 163 Views
  • 4 replies
  • 0 Likes

Failed Connection

Is anyone else seeing "Failed Connections" fire on iphlpsvc after [an agent/content update / IPv6 GPO change]? Did a specific content version introduce it? What's the recommended tuning approach here — an alert exclusion/exception scoped to iphlpsvc, or addressing the underlying network/IPv6 config so the failures stop?

OpenCode: Managing Token Usage, Costs, and Access Control with Prisma AIRS AI Gateway

5 min read

OpenCode is an open-source, terminal-first AI coding agent. OpenCode supports agent-based interactions, long-running tasks, and complex instructions that can span large context windows.Its model-agnostic design makes it easy to experiment. Local model support also allows OpenCode to run in air-gapped environments where sending data to external A...

amenon by • L2 Linker
  • 83 Views
  • 0 replies
  • 0 Likes

Tracking LLM Token Usage Across Providers, Teams, and Workloads

7 min read

Tracking LLM Token Usage Across Providers, Teams, and Workloads LLM token usage is the meter behind a model interaction. Most teams understand this in isolation: models bill by tokens, and more tokens mean more spend. What is harder is understanding token usage across a growing landscape of workloads, teams, and providers. With AI spending g...

drshah by • L2 Linker
  • 118 Views
  • 0 replies
  • 0 Likes

Upcoming Fuel Events

Top Solution Authors
Top Liked Authors
Top Contributors