This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • 531,522 Members
  • 848 Online
  • 1,134,163 Posts
  • 19,937 Solutions
  • 53,938 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Resolved! Manually update content version?

Is there a way to manually update the content version? I downloaded the agent install plus latest content version and I can't figure out what to do with the content version files or find a way to push the latest content version. This particular machine is stuck on 188.xxxx even after an uninstall/reinstall. The agent is talking to the server and...

enewman by • L1 Bithead
  • 11867 Views
  • 6 replies
  • 0 Likes

Setting up HTTP server for POST alerts

Anyone have tips or tricks or a guide on setting up and troubleshooting sending logs to HTTP POST?In Panorama, I configured Server Profile > HTTP > set up new server profile.Under Payload Format, starting with Config and System, I set the URI.If I click "Send Test Log" all I get is a generic "Failed to send HTTP request: Invalid configurat...

rjfoster by • L1 Bithead
  • 71 Views
  • 1 replies
  • 0 Likes

GlobalProtect External Gateways Require IPv6

Is there a way to get around the requirement of entering an IPv6 address when adding and external gateway in the GlobalProtect Agent App Setup, without using FQDN? I think I have all IPv6 turned off elsewhere in the config but maybe i missed it somewhere that is triggering this.

BBaldwin_0-1793994509452.png

Performance Issues & UI Lagging after Upgrade to Cortex XDR v5.2

Hello Community, We recently upgraded our tenant to Cortex XDR Cloud Management Console Version 5.2, and since the update, we are experiencing severe performance issues when trying to view data. The Symptoms: Failed Data Rendering: The main menus and sidebar tabs click open normally, but clicking on any dashboard leads to indefinite loading. Th...

From Managing Trust to Issuing It: Next-Gen CA in NGTS

5 min read

This blog was written by: Nicolas Malbranche Most enterprises run their private PKI somewhere else: a certificate authority on a server someone configured years ago and nobody wants to touch, or a hosted CA behind an API key. Either way the system that issues your certificates sits apart from the one that manages them. Your inventory can tell ...

Screenshot 2026-11-06 at 10.12.37 AM.png
Screenshot 2026-11-06 at 10.12.37 AM.png
JayGolf by • Community Team Member
  • 107 Views
  • 0 replies
  • 0 Likes

Malware detection

Hi Team, In our environment, a file was detected as malware. Based on the investigation, the file was downloaded using Firefox. We need to identify the exact source URL from which the file was downloaded. We have already checked the Causality Chain for the file, but multiple URLs are displayed, making it difficult to determine the actual downloa...

GlobalProtect Frequent Disconnect and Reconnect Issue for Some Users

Hello Community,We are experiencing an issue where GlobalProtect frequently disconnects and reconnects in a loop for some Windows users.The issue is intermittent. More than 90% of our users are working normally, while fewer than 10% are experiencing the frequent disconnect/reconnect behavior.For the affected users, GlobalProtect connects success...

Config ingestion and SDWAN

I've been getting a lot more requests to import existing standalone firewall into SCM. That's fine and dandy but I've been testing and the convert works and then the push fails because there is already config there it thinks it conflicts with. Why doesn't it override the existing like Panorama did upon ingestion? There is no good documentation f...

PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP

Subject: PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP We have a PA-460 running PAN-OS 11.1.10-h1. Our GlobalProtect portal and gateway are both bound to ethernet1/1 on the same public IP, using TCP 443. Authentication is handled through Duo SAML. We need to expose an internal HTTPS/WCF application on TCP 443...

mikeb by • L0 Member
  • 61 Views
  • 0 replies
  • 0 Likes

Prisma Acess Agent EPM issue

I have a PAA agent installed onto a Windows machine and when the vpn tunnel is down the EPM status is up and working but as soon as we bring the vpn tunnel up the EPM status goes down indicating a SSL handshake failed, now ive eliminated DNS issue with/without tunnel, all good, ive disabled dencryption of any *.gpcoudservice.com traffic within p...

Broker VM image migration (Ubuntu 20.04 → Debian 13+): does the WEC server certificate carry over, or do WEF client certs need reinstalling?

Hi everyone, We’re about to migrate our Broker VMs to the new image and I’d like to hear from anyone who has already done this with the Windows Event Collector (WEC) applet in play. Our setup: Cortex XSIAM, 6 Broker VMs on 31.100.2, running Ubuntu 20.04.6 LTS. Per the “Upgrade Broker VM” docs, nodes on an old image (Ubuntu 20.04 or earlier) mus...

Need Policy for MS System Center

Dear All Need help. Recently, we have observed that the Palo Alto firewall shows an alert on the dashboard when a Microsoft System Center user tries to scan and push updates from their workstation. This is routine work for some support users. If it happens regularly, we report this alert and inform higher management why it happens. But it doesn...

rockbd by • L0 Member
  • 97 Views
  • 1 replies
  • 0 Likes

What Is "GPCS-sc-interfw-rule" on Log Prisma Access

Hi everyone, I recently set up a Service Connection (SC) via Strata Cloud Manager (SCM), and the tunnel is successfully established. To test the policies, I disabled the rule allowing traffic from SCM to the Peer DC (Firewall). Currently, I'm experiencing a one-way communication issue: GlobalProtect (GP) users cannot ping or access apps in the...

R.PUTRA by • L0 Member
  • 130 Views
  • 1 replies
  • 0 Likes
Load more

Upcoming Fuel Events

Top Solution Authors
View All
Top Contributors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks