Blocking unknown devices that are not within the domain

Hello everyone,

I am a Palo Alto PA-450 user. In our organization, we removed around 20 computers from the domain due to their outdated versions. However, these computers continue to log in using the credentials of the last user who logged in while t

panorama in management only mode

we have a panorama pair in ha (vm), in management only mode. Having 3 pairs of managed firewalls wherein only configuration push is being applied. Dynamic updates for each pair of Fws is being applied manually since it is an air-gap infra (no-interne

Device Permanent Exceptions - Is There A Limit?

Hello-
Is there a limit to the number of devices that can be listed within the Permanent Exceptions?  Endpoints -> Policy Management -> Extensions -> Device Permanent Exceptions

Thanks.

Cortex XDR - Solutions for log collection without an official integration

Has anyone found a good approach for collecting logs from an API when there isn't an official Cortex XDR integration?  For example, Automox has released a Splunk and DataDog app, but the custom collection in Cortex XDR isn't a good fit.  We use the B

USB protection exeption for ClickShare usb Device

Hello everybody,

if we block USB Drives/Windows drives our ClickShare (USB Screen Share Dongle) devices also get blocked.

But they don´t appear in the "Device Control Violations" list so we can´t exclude them from blocking. 

We tried to exlude the

SD-WAN Traffic Control from the Hub Side

Hi Guys,

our Palo Alto on the HUB side is equipped with a single 10G uplink interface. On the Spoke side, there are three uplinks with varying bandwidths, and in this setup, the Panorama SD-WAN plugin generates three IPsec tunnels. I can manage traff

Multicast Bidirectionel Support

Hello everyone,

Does PaloAlto currently support multicast bidirectional?

As of 2019, it seems that the above is not supported.

https://live.paloaltonetworks.com/t5/integration-discussions/multicast-bidirectionel/td-p/248160

Palo Alto Mock server for API testing

Hi Support,

We are developing a API connector to pull Traffic logs from Palo Alto firewall.
Do you guys have any mock server to test the rest API?

RMA detail

What is the RMA timeline if a Palo box fails?

We have firewall for below details :

1.  PAN-PA-3220 ; S/N-016201033390

PAN-SVC-PREM-3220

Premium support, PA-3220

OpenConfig automatically installed with 10.2.11-hx upgrade

We installed 10.2.11-h6 on a pair of virtual firewalls and the OpenConfig plugin was automatically installed and a new Device Administrator user called __OpenConfig was added. Is this documented anywhere? I can't find it. 

And why do I need this plug

Getting Inbound connections from Malicious Palo Alto IP

Hello all,

I've recently detected inbound traffic from an IP address 147.185.132.201 where the ISP is showing as Palo Alto Networks, Inc. 
The IP has a malicious reputation over VT, AbuseIPDB, and IPVoid.

Can anyone with information about this IP addre

Unable to open TAC cases due to mandatory TSF file upload requirement

hi guys, 

I am trying to open a TAC case in PA portal, however it seems there is latest change happen which requires a TSF file upload mandatory.

SInce we are a restricted site, we cannot share or upload anything on the portal. Because of this issue,

Add multiple authentication profiles (assigned to different user groups) to Global Protect VPN

We are looking to convert our default authentication profile from RADIUS w/DUO MFA to SAML (Azure) w/DUO MFA. The client would like to test the new solution with just the internal IT team while normal users maintain the old authentication method. Is

LDAP integration with Paloalto

Hello Team,

We have global protect configured on prisma that is managed by Panorama. currently our global protect users authenticate by SAML.

Now, our requirement is we want LDAP integration so our global protect users can authenticate by LDAP fo