• 528,520 Members
  • 1,647 Online
  • 1,132,748 Posts
  • 19,802 Solutions
  • 53,696 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

GP Agent Machine Certificate Check

Hello, I am trying to find out more information about a GP portal setting called Machine Certificate Check under Portal Configuration / Agent / Agent Config / Config Selection Criteria / Device Checks. I was hoping to use a machine certificate check outside of the authentication tab to allow or disallow machines based on user/user group, but I...

Upcoming Change: Telemetry Enablement for Eligible PAN-OS NGFWs

3 min read

Overview Palo Alto Networks is enabling device telemetry on eligible PAN-OS NGFWs to help improve threat detection, enhance visibility into device health, and accelerate support case resolution. This update is rolling out in three waves. If your firewall meets the criteria below, telemetry will be enabled automatically and no further action i...

Upcoming Change.png
gagsingh by • L2 Linker
  • 558 Views
  • 5 replies
  • 6 Likes

Resolved! Urgent Assistance Required – Cortex XDR Performance

Hi everyone, I urgently need your help with a Cortex XDR configuration issue. We need to completely exclude specific directories from Cortex XDR activity, ensuring that the agent does not perform any scanning, analysis, injection, or other operations within those directories. Initially, we suspected that the issue was related to Exploit Pro...

tlmarques by • L4 Transporter
  • 132 Views
  • 2 replies
  • 0 Likes

Traps For Expired Certificate

I am on 11.1.13 Does the NGFW or Panorama have traps for expiring or expired certificates? (Used for mgmt access and secure communications channel) I the trap below in MIB file for 11.1 however it does not seem to be triggering when certificate expires. .1.3.6.1.4.1.25461.2.1.3.2.0.3220 panTLSCertificateExpiredTrap

nahiar by • L1 Bithead
  • 143 Views
  • 2 replies
  • 0 Likes

DHCP Relay Source IP Address Behavior

Attention: Global TPM team, Could you please confirm the following DHCP Relay behavior? When a firewall acts as a DHCP Relay agent and forwards DHCPDISCOVER messages to a DHCP server as unicast packets, is the source IP address the IP address of the interface configured as the DHCP Relay agent? Also, if available, could you please share an...

Resolved! I am facing an issue during the upgrade Panorama (PANOS 11.1.4-h7) to PANOS 12.1.7

I am facing an issue during the upgrade Panorama-VM (PANOS 11.1.4-h7) to PANOS 12.1.7, After uploaded PANOS version 11.2.10 base version able to upgrade successfully to PANOS 11.2.10-h13. After that when try to upgrade to PANOS 12.1.7 and uploaded images it gives an error "Failed to load image into software manager" If anyone faced this issue...

Gourab_H by • L1 Bithead
  • 248 Views
  • 3 replies
  • 0 Likes

Custom SLA timer field for case

Dear community, I have a question regarding SLA custom fields. We have created a custom case timer field along with its associated SLA custom field to measure Time to Detection. The SLA targets are defined based on the case severity: 15 minutes for Critical, 30 minutes for High, 2 hours for Medium, and 12 hours for Low. We have encountered situa...

Canva App temp setup file detected as Generic.ml

https://www.virustotal.com/gui/file/20530653cef67f160d623e0586f8955c2f9114538c35517007293173599caba6/detection Description: temp-Canva Setup 1.126.1.exe is being flagged in VT and WildFire Verdict: Generic.mlThe file hash SHA-256: 20530653cef67f160d623e0586f8955c2f9114538c35517007293173599caba6

GlobalProtect Release for Ubuntu 26.04 LTS ?

Hello together.recently was the new Ubuntu 26.04 LTS release, until now the provided GlobalProtect client supports only Ubuntu 24.04:https://docs.paloaltonetworks.com/compatibility-matrix/reference/globalprotect/where-can-i-install-the-globalprotect-app?otp=linux#linux When can we expect the new GlobalProtect version for Ubuntu 26.04 ? Best re...

PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied"

Hi Team Pan OS Integrated User ID is connected with one of our DC server with out having any issues while configuring in the other DC servers we are getting the "ACCESS Denied" in the server monitoring. While seeing in the >less mp-log useridd.log I have seen in he following error: tail follow yes mp-log useridd.log 2025-02-20 14:1...

No logs shows in the threat section in panorama (panorama collect the logs from a log collector)

We are facing an issue recently, We have 7500 series palo alto and logs send to log collector (M-700 log collector group running PAN OS 11.1.13-h8),. When check from panorama we are able to see the traffic session end reason as "Threat" but when check in the Threat section not able to sees the exact logs and the threat details as well. If an...

Gourab_H_0-1791943463869.png
Gourab_H_1-1791943543980.png
Gourab_H_2-1791943682687.png
Gourab_H by • L1 Bithead
  • 84 Views
  • 1 replies
  • 0 Likes

NGFW Engineer Certification – Beacon Learning Path vs. Exam Datasheet

NGFW Engineer Certification – Beacon Learning Path vs. Exam Datasheet Hi everyone, I’m currently preparing for the Palo Alto Networks Certified Next-Generation Firewall Engineer certification and following the official Beacon learning_path. While comparing the Beacon learning path with the official certification datasheet/exam objectives, I not...

Resolved! GPVPN Issue

We have GlobalProtect Agent 6.2.8-c317 yesterday some users could connect but could not access network files or get on the internet. Other user no problem. Nothing changed on our network other then the GP VPN license expired 2 days ago even though we paid for the renewal 3 weeks ago. I am not a Palo Alto person and since I cannot get to support...

Upcoming Fuel Events

Top Solution Authors
Top Liked Authors
Top Contributors