• 531,616 Members
  • 980 Online
  • 1,134,197 Posts
  • 19,942 Solutions
  • 53,940 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Expedition, IronSkillet, and Best Practices

1 min read

Expedition – The Glue Between IronSkillet and Best Practices As you already know, Expedition was conceived to reduce the time and efforts a security admin needs to improve and optimize their Palo Alto Networks configurations. Following that effort, we have added, within Expedition, support not only to run a BPA analysis if not also be able to ...

alestevez by • L7 Applicator
  • 34255 Views
  • 5 replies
  • 3 Likes

Help registering a PA-440 bought online in the US

Help registering a PA-440 bought online in the US for use in Oman Hi everyone, I bought a PA-440 firewall online from a seller in the United States. The unit is now in Oman, where I plan to use it at SpiritHub Roastery. It’s still unregistered, and I’m trying to register it under our company’s Customer Support Portal account. I’ve contacted Palo...

info by • L0 Member
  • 38 Views
  • 2 replies
  • 0 Likes

IAM Role for Secondary IP move between Palo Alto Firewalls in AWS

Hi All, We have two PA firewalls in AWS in a HA (Active / Standby) using secondary IP move. After an OS on both firewalls, secondary IPs are not moving back to FW01. Can someone please review following IAM role and confirm this will work in our scenario. Please also mention do i need following two in IAM parameters for secondary IP move?"ec2:Att...

Repeated review requests, changing malware labels, and no explanation

I own bloxfind.com, a Roblox analytics website showing game statistics, player counts and trends. I’ve submitted numerous requests to correct its classification, and this is getting ridiculous. It was labeled Malware, then changed to Insufficient Content after review. Now the main domain is flagged as Phishing, and my Clerk-powered login subdoma...

Palo Alto Firewall Upgrade from PAN-OS 10.2.10 to 11.2.10-h14 – Upgrade Path Confirmation and Feedback

I am planning to upgrade our Palo Alto firewalls from PAN-OS 10.2.x to 11.2.10-h14.Our environment consists of a firewall HA pair, and we do not have Panorama. Before proceeding with the upgrade, I would appreciate your feedback on the following:Has anyone experienced any issues during the upgrade from PAN-OS 10.2.x to 11.2.10-h14?Are there any ...

False positive: Generic.ml - OutlineService.exe (VanyaVPN 1.21.1)

SHA-256:273c97229210d8f7cd03dd32663be524e1cfc17b9da77a21666528de0ccef130VirusTotal report:https://www.virustotal.com/gui/file/273c97229210d8f7cd03dd32663be524e1cfc17b9da77a21666528de0ccef130Reported verdict:Palo Alto Networks - Generic.ml, in the VirusTotal analysis dated 2026-11-06, viewed on 2026-11-08 (1/69 engines).Description:This is a new ...

Resolved! Manually update content version?

Is there a way to manually update the content version? I downloaded the agent install plus latest content version and I can't figure out what to do with the content version files or find a way to push the latest content version. This particular machine is stuck on 188.xxxx even after an uninstall/reinstall. The agent is talking to the server and...

enewman by • L1 Bithead
  • 11894 Views
  • 6 replies
  • 0 Likes

PA-1410 on 12.1.10-h2 troubleshooting for PAN-282032

Hi, we are currently running a PA-1410 on PAN-OS 12.1.10-h2. The workaround provided to mitigate PAN-282032 says to run the following command: debug dataplane sw-asic dump flow-table info When we run the above command, we get an invalid syntax error. Does anyone know if this workaround works for a PA-1410? Known Issue - PAN-282032 Any advi...

Setting up HTTP server for POST alerts

Anyone have tips or tricks or a guide on setting up and troubleshooting sending logs to HTTP POST?In Panorama, I configured Server Profile > HTTP > set up new server profile.Under Payload Format, starting with Config and System, I set the URI.If I click "Send Test Log" all I get is a generic "Failed to send HTTP request: Invalid configurat...

rjfoster by • L1 Bithead
  • 103 Views
  • 1 replies
  • 0 Likes

GlobalProtect External Gateways Require IPv6

Is there a way to get around the requirement of entering an IPv6 address when adding and external gateway in the GlobalProtect Agent App Setup, without using FQDN? I think I have all IPv6 turned off elsewhere in the config but maybe i missed it somewhere that is triggering this.

BBaldwin_0-1793994509452.png

Performance Issues & UI Lagging after Upgrade to Cortex XDR v5.2

Hello Community, We recently upgraded our tenant to Cortex XDR Cloud Management Console Version 5.2, and since the update, we are experiencing severe performance issues when trying to view data. The Symptoms: Failed Data Rendering: The main menus and sidebar tabs click open normally, but clicking on any dashboard leads to indefinite loading. Th...

From Managing Trust to Issuing It: Next-Gen CA in NGTS

5 min read

This blog was written by: Nicolas Malbranche Most enterprises run their private PKI somewhere else: a certificate authority on a server someone configured years ago and nobody wants to touch, or a hosted CA behind an API key. Either way the system that issues your certificates sits apart from the one that manages them. Your inventory can tell ...

Screenshot 2026-11-06 at 10.12.37 AM.png
Screenshot 2026-11-06 at 10.12.37 AM.png
JayGolf by • Community Team Member
  • 170 Views
  • 0 replies
  • 0 Likes

Malware detection

Hi Team, In our environment, a file was detected as malware. Based on the investigation, the file was downloaded using Firefox. We need to identify the exact source URL from which the file was downloaded. We have already checked the Causality Chain for the file, but multiple URLs are displayed, making it difficult to determine the actual downloa...

Upcoming Fuel Events

Top Solution Authors
Top Contributors