• 530,485 Members
  • 1,221 Online
  • 1,133,761 Posts
  • 19,892 Solutions
  • 53,884 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Confirmation of Panorama 10.2.13-h7 Impact and PHP Version

Attention: Global TPM team, Regarding CVE-2026-109618 / CVE-2026-109619, could you please confirm the following? 1. What PHP version is included in Panorama 10.2.13-h7? 2. Can we understand that Panorama 10.2.13-h7 is affected by this issue and that 10.2.13-h27 (or later) is the fixed release for Panorama? Best Regards,

Nimbus by • L1 Bithead
  • 27 Views
  • 1 replies
  • 0 Likes

Global Protect Intelligent Portal

Hi All, we are upgrading our users from GP client 6.0.3 to 6.3.3 to take advantage of Intelligent Portal. We currently only have one portal at our head office NGFW. Just need to confirm that Intelligent portal would work if we add more portals at our global offices, upgrade the GP clients and add the registry entries required on the client mach...

Impact of "Sync to HA Peer" During PAN-OS Image Synchronization

Attention: Global TPM Team Hello Team, General product behavior question. When using "Sync to HA Peer" to synchronize a PAN-OS software image to an HA peer, are there any known service impacts or operational impacts (traffic forwarding, session handling, HA operation, management-plane performance, etc.) during the synchronization process? ...

Nimbus by • L1 Bithead
  • 211 Views
  • 2 replies
  • 0 Likes

Modern PAM for Linux & Migrating to Secrets Rotation Service (SRS) Office Hours Slide Deck - October 2026

1 min read

View the slide presentation from our Success Office Hours that took place October 28, 2026. In this session, our product team explored the future of identity security through two key topics: Modern PAM for Linux and the migration from Central Policy Manager (CPM) to Secrets Rotation Service (SRS). The session included a live demo of the Modern P...

GlobalProtect iOS devices and Passkeys

We are currently on 11.1.13 HF 12 and using GlobalProtect 6.3.6 on iOS devices, Passkeys work on our SAML portal for Windows machines, but iOS devices do not connect, has anyone seen this and if so how did you fix it? The Microsoft MFA Authenticator app worked fine for iOS devices but once Passkeys were enabled, they could not connect.

Wrong classified URL

Hi, Can someone explain what the malware base DB is? Does the MLAV flag indicate that the file was classified as malware by the machine learning engine? If so, how can this classification be overridden or excluded? Thanks.

url_check.png
HeinzP by • L2 Linker
  • 157 Views
  • 4 replies
  • 1 Likes

What does Portkey Error Code 033 mean, and how can it be resolved for MCP Gateway access?

IssueWhy does an Active Service Gateway API Key with MCP → INVOKE permission receive HTTP 403 / Portkey Error Code 033 when invoking MCP servers provisioned to the same admin-automation workspace in Strata Cloud Manager (SCM)?Environment / BackgroundI am evaluating the PRISMA AIRS / AI Gateway MCP functionality in an SCM trial tenant.A Tumor Boa...

False Positive Submission (Generic.ml) – D2R-TPP-Demo-0.5.0-Setup.exe

Hello,I'm the developer of a fan-made mod for Diablo II: Resurrected. Palo Alto Networks detects my installer on VirusTotal as Generic.ml. I believe this is a false positive.File: D2R-TPP-Demo-0.5.0-Setup.exeSHA-256: 8d7c96528f1619aa91ceaa3cee5cf8ad9be381142771a1b75fe1fc728137004eVirusTotal: https://www.virustotal.com/gui/file/8d7c96528f1619aa91...

XDR Automation Rules not triggering Playbook execution

I am experiencing an issue with XDR Automation Rules when attempting to execute a script. I have configured an automation rule to trigger a Playbooks when a specific event occurs. The Playbook is designed to run the built-in Quick Action: “Run Endpoint Script”, which executes a script registered in Action Center > Scripts Library. However, th...

.522643 by • L1 Bithead
  • 1074 Views
  • 3 replies
  • 0 Likes

armoury xsoar

I am trying to access Xsoar for case surveys, right now it says I am unauthorized. please point me in right direction if this is not the place.

Welcome to LIVEcommunity's 2026-2027 Cyber Elite Program!

6 min read

LIVEcommunity created its Cyber Elite Program to recognize experts in our community from around the globe who demonstrate excellence in participation and contributions. This innovative program is part of Palo Alto Networks commitment to empower outstanding members who enrich our global online community. About the Cyber Elite Program Cyber El...

cyber_elite_2026_2027_landing_banner_light_v2_1600x250.jpg
LIVEcommunity Cyber Elite.png
Expertise.png
Tone.png
IrynaC by • Community Manager
  • 34439 Views
  • 4 replies
  • 10 Likes

XDR Collector Status on Dashboard

Hi Everyone, I'm having trouble finding a way to create a widget displaying the XDR Collector status and create a custom correlation rule for a disconnected XDR Collector. I'm not able to find the correct dataset to use in the query. I used Agentic Assistant and was not able to generate the query correctly Is this feasible on Cortex XDR Pro?

Upcoming Fuel Events

Top Solution Authors
Top Contributors