HA FW on AWS

I want to deploy two firewalls on AWS, in different availability zones. I understand from the guide that this isn't recommended, but that it is supported. I've managed to complete the deployment without any issues. However, I have some questions. Since it’s not possible to move an ENI between AZs, if there’s a failure with FW-A or AZ-A, FW-B wil...

Watch Now: Spark User Summit - Advanced IP Defense

On October 29, 2026, we had a fantastic session about one of the newer capabilities within the NGFW, Advanced IP Defense. Our speakers, Huzefa Amreliwala and Anish Sharma, take time to not only introduce us to the technology, but we get to see some actual case studies from the event. Please be sure to check out these recordings. PDFs of the ...

Issue with ChatGPT

Hello, after installation of ChatGPT client on Windows Clients users are reporting performance issues.Problems are also reported after updating the ChatGPT App.Builtin Snipping Tool (Win+Shift+S) takes about 10 seconds.Powershell takes 10 seconds to open a shell window and continues loading (blinking "|") for up to 30 minutes until any command...

Hi everyone, How to PAM Self-hosted connect to AWS CLI?

PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP

Subject: PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP We have a PA-460 running PAN-OS 11.1.10-h1. Our GlobalProtect portal and gateway are both bound to ethernet1/1 on the same public IP, using TCP 443. Authentication is handled through Duo SAML. We need to expose an internal HTTPS/WCF application on TCP 443...

Palo Alto Firewall Upgrade from PAN-OS 10.2.10 to 11.2.10-h14 – Upgrade Path Confirmation and Feedback

I am planning to upgrade our Palo Alto firewalls from PAN-OS 10.2.x to 11.2.10-h14.Our environment consists of a firewall HA pair, and we do not have Panorama. Before proceeding with the upgrade, I would appreciate your feedback on the following:Has anyone experienced any issues during the upgrade from PAN-OS 10.2.x to 11.2.10-h14?Are there any ...

GlobalProtect v6.3 on Android

Hi, When attempting to download the GlobalProtect App from the Google Play Store, the default version hosted in the store is 6.3.5. This is in direct contradiction to the compatibility matrix, which suggests Android only supports up to GlobalProtect v6.Where Can I Install the GlobalProtect App? As such, upon installing the App, users encount...

CVE-2026-98432 impact on PAN-OS 11.1.13-h12 and 11.2.10-h14

Attention: Global TPM team, CVE-2026-98432 was recently published as a Linux kernel vulnerability. Could you please confirm whether PAN-OS 11.1.13-h12 and 11.2.10-h14 are affected by this vulnerability? I could not find any Palo Alto Networks Security Advisory related to this CVE. Thank you.

Idira EPM Onboarding Success Strategies eBook

Deploying Endpoint Privilege Manager (EPM) doesn't have to mean trading off security for user friction. Whether you are planning your initial deployment or looking to streamline policy management, this guide outlines the proven roadmap to enforce least privilege without disrupting day-to-day operations. What you’ll find inside: Proven Impl...

IDIRA SIA Target validation failure

While i am using the IDIRA SIA to connect to a windows Server using ZSP policy, I am getting Certificate validation failed error. In the global Settings, i have disabled the target validation. Somehow it is still ding the target validation. Anyone else face this problem ? Can you suggest where else i can check ?

IAM Role for Secondary IP move between Palo Alto Firewalls in AWS

Hi All, We have two PA firewalls in AWS in a HA (Active / Standby) using secondary IP move. After an OS on both firewalls, secondary IPs are not moving back to FW01. Can someone please review following IAM role and confirm this will work in our scenario. Please also mention do i need following two in IAM parameters for secondary IP move?"ec2:Att...

Google captcha error

Most of the users are getting captcha error in google.com Wondering why PA is not blocking such requests. Will the DOS policy in PA help prevent such unlimited outbound queries? Page says our systems have detected unusual traffic from your computer network.

Migration Panorama from ESXi to Nutanix AHV

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors. We are currently using Panorama in VM mode. 1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hypervisor (or Redhat KVM)? 2. If yes, does Panorama support migration from VMWare to Nutanix AHV with Nut...

PA-505 ZTP Onboarding to SCM, Can I move back to trad MGMT Port

Hi everyone, I deployed a PA-505 via ZTP to SCM; it worked great, and I moved it to the required folder. This is a remote simplified deployment for the customer. I am now looking to deploy more this way, some with HA I have seen issues with the passive fire via the ZTP port. So want to avoid hiccups and also if we can easiely go back to the...

Strata Cloud Management

Hi Team, We have recently migrated all of our firewalls to Strata Cloud Manager and are currently working through the identified incidents and recommended posture improvements. During this process, we have encountered an issue where certain features and configuration settings are not visible within Strata Cloud Manager, despite being available...