• 531,311 Members
  • 1,229 Online
  • 1,134,060 Posts
  • 19,918 Solutions
  • 53,916 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Need Policy for MS System Center

Dear All Need help. Recently, we have observed that the Palo Alto firewall shows an alert on the dashboard when a Microsoft System Center user tries to scan and push updates from their workstation. This is routine work for some support users. If it happens regularly, we report this alert and inform higher management why it happens. But it doesn...

rockbd by • L0 Member
  • 66 Views
  • 1 replies
  • 0 Likes

What Is "GPCS-sc-interfw-rule" on Log Prisma Access

Hi everyone, I recently set up a Service Connection (SC) via Strata Cloud Manager (SCM), and the tunnel is successfully established. To test the policies, I disabled the rule allowing traffic from SCM to the Peer DC (Firewall). Currently, I'm experiencing a one-way communication issue: GlobalProtect (GP) users cannot ping or access apps in the...

R.PUTRA by • L0 Member
  • 88 Views
  • 1 replies
  • 0 Likes

Unable to Create a New Support Case – Portal Access Issue

Hi Team, I am encountering the error message shown in the attached screenshot when trying to create a new support case. After logging into the portal, when I attempt to create a case for one of my customers, I receive the attached error message. Could you please look into this issue and help me resolve it? Please let me know if you need any addi...

Trying the DNSProxy feature for Static Response

Hie, Situation - Wanted to kaminsky the DNS Responses for my client from the FWComplication - None of the dig are responded Need your help on this? Client Requests for Promise/Spoofed IP keviv@keviv-VMware-Virtual-Platform:~$ ifconfig ens37ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500inet 192.168.21.21 netmask 255.255.255.0 ...

ocpfn4 by • L0 Member
  • 597 Views
  • 1 replies
  • 0 Likes

What does Portkey Error Code 033 mean, and how can it be resolved for MCP Gateway access?

IssueWhy does an Active Service Gateway API Key with MCP → INVOKE permission receive HTTP 403 / Portkey Error Code 033 when invoking MCP servers provisioned to the same admin-automation workspace in Strata Cloud Manager (SCM)?Environment / BackgroundI am evaluating the PRISMA AIRS / AI Gateway MCP functionality in an SCM trial tenant.A Tumor Boa...

Upcoming Change: Telemetry Enablement for Eligible PAN-OS NGFWs

3 min read

Overview Palo Alto Networks is enabling device telemetry on eligible PAN-OS NGFWs to help improve threat detection, enhance visibility into device health, and accelerate support case resolution. This update is rolling out in three waves. If your firewall meets the criteria below, telemetry will be enabled automatically and no further action i...

Upcoming Change.png
gagsingh by • L2 Linker
  • 2102 Views
  • 13 replies
  • 6 Likes

Broker-VM cluster with BVMs on different platforms

Hi All, waiting on official confirmation from PAN on this.. but has anyone to date done this? where you have a bvm in Azure and a bvm on-prem (esxi) and clustered them together? doable? i have concerns around hardware failure and the arp cache being cleared amongst other things.. thanks in adv

PA_nts by • L4 Transporter
  • 126 Views
  • 1 replies
  • 0 Likes

New to SCM and PA and have questions.

I am new to PA and SCM so I am learning at I go. I am working with PA-520s for hardware. I started working within the PAN-OS and had a great working config. I am now trying to manually move that config into SCM since there is not migration path. I have been somewhat successful in this but have a few questions that I am nto understanding. ...

When Trust Changes: Building Cryptographic Agility Into Certificate Management

12 min read

Why continuous certificate visibility, automated lifecycle management, and flexible CA relationships are essential to maintaining digital trust. Digital trust is built on relationships between certificates, cryptographic keys, certificate authorities (CAs), and the systems that rely on them. Every secure website connection, authenticated appli...

alharris_0-1793805567001.png
alharris by • L1 Bithead
  • 115 Views
  • 0 replies
  • 1 Likes

PA-5450 Dataplane CPU Utilization Discrepancy (GUI vs SNMP)

Attention: Global TPM team, Hello, Could you please clarify the relationship between the Dataplane CPU utilization shown in the GUI and the SNMP CPU OIDs on a PA-5450? It was observed that the GUI shows approximately 80% Dataplane CPU utilization, while hrProcessorLoad.2 (1.3.6.1.2.1.25.3.3.1.2.2) returns only 5-10%. Could you please con...

Nimbus by • L2 Linker
  • 190 Views
  • 3 replies
  • 0 Likes

Panorama API - push to devices

Hello Palo Alto Community, I am trying to add an object to an address group and push the changes using the Panorama API. Currently, I am able to create and add a new object to an address group using curl via Windows CMD. However, I am facing an issue with the commit and push process. When I perform a commit, it only applies to Panorama itself, a...

Resolved! Panorama SD-WAN Plugin Compatibility

Hello All! Seeking clarification on whether or not I need to upgrade my Panorama SD-WAN plugin. Currently, I am running PAN-OS 10.2.x and using SD-WAN plugin version 3.0.3. In the compatibility matrix the maximum PAN-OS version listed for this plugin version is "Latest". Does this refer to the latest version based on the minimal PAN-OS versio...

nohash4u by • L3 Networker
  • 212 Views
  • 2 replies
  • 0 Likes

Upcoming Fuel Events

Top Solution Authors
Top Contributors