LIVEcommunity | Palo Alto Networks

The user Id tab under not able to detect AD Group but Group Incluse List shows the Group

I am unable to find the User group under user column in the Firewall Policy Tab and i see that the User Id agents are connected to the Firewall but when i do the same Search under the Group Inclusion List i see the Group in that Tab. I was wondering ...

FlexVM Licensing with Software NGFW Credits

Hi all, As you pribably know, paloalto recently changed the licensing of VM firewalls. With greater flexibility (and higher licensing costs), there is now also the possibility to increase only the RAM for such a VM firewall which results in higher ca...

Prisma Access Cloud Management New features in the June 2021 release

We upgraded the Prisma Access Cloud Management yesterday and have a fantastic set of new features: Easy M365 Enablement: Built-in security and decryption rules, as well as a guided walkthrough, mean you can safely enable M365 in just a few clicksGlob...

Installing minemeld on a supported Operating system ubuntu 18.04 or 20.04

Due to security requirements, we cannot run an unsupported operating system, however we need to install Minemeld to update office365 lists. Ubuntu 16.04 is unsupported as of April 2021. Is there support for or an install method that works on Ubuntu 1...

Wildfire updates chenge

Hi, We have configured to download the "wildfire updates" every minute. So whats is the recommended value for this? Sometimes we face this error, and we are thinking to increase the time for WF updates:

MS Graph Integration Issues

Late Yesterday something happened to all of my Ms Graph integrations. They now all return a Error in authentication. Try checking the credentials you entered. (85).. I have tried to recreate the application and key but same thing. Are there logs/or s...

MS-ISAC TAXII Feeds

Is anyone successfully consuming TAXII feeds from MS-ISAC, specifically, their feeds from taxii-pilot.cisecurity.org? The miner shows success and there are log entries for indicators, but there are no indicators in the counters or graphs.

Resolved! Access to Internal Web Site Through pfSense VPN

Hey Community:I am in the process of rolling out GlobalProtect, but until I do, i have to continue to use a pfSense OpenVPN that was already in place before the Palo was deployed. The problem I am running into when i connect to the pfSense VPN i cann...

System Logs

Hi, Do we have any list of critical and high severity system logs? Like what are the examples of hardware failures, serious issues etc...

Does Expedition support PANOS 10.0?

Hi All, Does anyone know if Expedition works ok with PANOS10? I'm hoping to use it to migrate from one Palo to another - using Expedition to clean up the ruleset rather than migrate direct

Global Protect After Prelogin the switch to user is not changing IP networks

We are using machine and user certificates from a windows server 2016 CA. to authenticate when using Global Protect.Step one is the prelogin connections and it works as intended. The IP address is assigned on 10.1.1.0/24 network.Once the user logs in...

Global Protect pre-logon then on-demand configuration

We're using these versions (Yes, we need to upgrade, but other priorities at the moment)PANos 8.1.14Global Protect client 5.2.1 We're surrently usingOn-Demand, which is working. We used this page with the only difference is we're using AD Authenticat...

IBM Cloud - can't bind a public IP to any other interface except eth0

We are trying to deploy a Palo VM series in the IBM Cloud. We found that we can only attach a public IP to the management interface (eth0) only. If we try to bind another public IP to say eth1, we get a message saying "public IP already attached to t...

For AD user password reset option

We have seen that whenever a domain password is going to expire for the SSL VPN user, the Global Protect client on the user's system starts flashing a message that the password will expire soon. We want to know if there is any possibility to embed a ...

"Server error : Timed out while getting config lock. Please try again."

Hi Team, We getting the error "Server error : Timed out while getting config lock. Please try again.". We tried to restart the mgmt server but the issue still same. When we rebooted the firewall issue is resolved. Pan os 9.0.12PA-3050. Anyone help me...