This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • 527,247 Members
  • 1,035 Online
  • 1,132,227 Posts
  • 19,754 Solutions
  • 53,602 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Prisma Access as a Replacement for GlobalProtect and Security Inspection Platform – Seeking Real-World Feedback

Hello Everyone, We are currently evaluating Prisma Access as a replacement for our traditional GlobalProtect deployment and are considering using Prisma Access as our primary cloud-delivered security platform for remote users. Our goal is to leverage the full security stack, including: URL Filtering WildFire DNS Security Advanced Threat Preve...

Github EDLs missing IPs?

Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...

Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?

Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface? I tested and it seems I only need Panorama to allow FW IP. But from the article below for MGMT interface profile it mentions adding Panorama IP is required. https://live.paloaltonetworks.com/t5/general-articles/why-it-s-essential-to-secure-your-m...

nahiar by • L1 Bithead
  • 56 Views
  • 2 replies
  • 0 Likes

Palo Alto 1420 - Invalid username or password.

Dear all, We have face an issue recently with our Palo Alto HA pair. When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all. The only recent change we have implemented was the CIS Device H...

GlobalProtect VPN not working on T-Mobile Home Internet

Over the past couple of weeks we have been getting more and more support tickets stating that our users can't connect to GlobalProtect VPN. The one common thread they have is they all have T-Mobile Home Internet. Has anyone else noticed this? Is there a fix or workaround? Thank you.

jambulo by • L4 Transporter
  • 67036 Views
  • 9 replies
  • 0 Likes

Help with file blocking security profiles

Hello everyone, Let me say I am new to the live community, I am trying to figure out if possible to Block file downloads using the "File download" security profile. I enabled it added it to my in to out policy and it still downloaded the files. After doing some more research I found out that the "Allow HTTP partial response" is enable it w...

How to block all AI-based applications

Hi Team, 1) We have a customer who wants to block all AI-based applications but the applications are not getting blocked.2) Initially, we created a application group policy in Security Policy and added all AI-based applications with action as deny. After commit the AI applications were getting blocked successfully. However, Claude AI was still a...

Issues with connectivity between HA PAs and Nexus Leaf Switches

I've inherited a setup which has PAs with two vsys each connecting:external switch/router > PA external vsys > A10 Load Balancers > PA internal vsys > Cisco Nexus Leaf switches We run a full mesh setup (1x interface from each side of the PA HA pair to each (upstream switch, external A10, internal A10) internal device, both primary an...

rmeskill by • L0 Member
  • 262 Views
  • 2 replies
  • 0 Likes

empty HIP after last Microsoft updates (09.2026)

Hi, Following the recent Microsoft updates KB5124008 and KB5126052, we have observed a significant issue with GlobalProtect’s operation, manifested by the transmission of empty or invalid HIPs. PANOS version 10.2.16-h6 (but also on 11.2.10-h13—I was in the middle of the update but rolled back to limit its impact). GP client version—primarily 6.3...

JacekL by • L2 Linker
  • 1017 Views
  • 6 replies
  • 0 Likes

VM-Series License Renewal Display Behavior

Attention: Global TPM TeamHello Team, Could you help clarify the expected behavior of VM-Series license renewal and license expiration date display? Environment:- Product: VM-Series- PAN-OS: 11.1 Example: Current license:- Date Issued: Nov 14, 2025- Date Expires: Nov 14, 2026 Renewal license:- Contract period: Nov 15, 2026 - Nov 14, 2027 Our u...

VPN Issues with SAP

I got intermitent connection affecting production PA-5220 VERSION 11.1.13 . Global protect 6.2.8-1045 troubleshooting : The VPN tunnel temporarily disconnected and routing entries associated with the tunnel were removed. The GlobalProtect client subsequently recreated and reconfigured the virtual adapter. A new IP address assignment was re...

F.Pinar by • L3 Networker
  • 136 Views
  • 1 replies
  • 0 Likes

Clarification on Strata Logging Service and eDLP Log Forwarding

Hi Team, We are an MSSP and have received a request to support eDLP. Since we do not have access to these devices/services in our environment, we primarily rely on the available documentation to understand and support them. I have a few questions regarding how Strata Logging Service (SLS) works. We currently support Prisma Access using SLS. Wh...

Load more

Upcoming Fuel Events

Top Solution Authors
View All
Top Contributors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks