This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • 524,196 Members
  • 2,464 Online
  • 1,130,742 Posts
  • 19,615 Solutions
  • 53,370 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Non-Persistent VDI – File Collection and Investigation with XDR

Hi everyone, I need some help/advice. I’ve been seeing some cases on non-persistent VDIs where we receive alerts such as “Script Engine Activity - 3121803131”. Basically, the Cortex XDR alert is related to an HTML file hosted on a ShareFile share that I don’t have access to. From what I understand, the HTML file is essentially a web-page templat...

tlmarques by • L4 Transporter
  • 81 Views
  • 1 replies
  • 0 Likes

XDR CPU Spikes and logging levels

Hi Has anyone else come across this? I keep seeing CPU spikes on production web servers running v9.3 and 9.3 that has an impact on the end users. They come in roughly 45 minute bursts and running procmon indicates the cyserver.exe is causing them. One suggestion ive had is to clear the content cache in the possibility that a bad update is tryi...

XDR agent reboot recover everytime

Hi guys, Recently, we identified several computers running Cortex XDR version 9.2.0.120 with Content Version 2340-38788. After the machines start, connect to the tenant, and receive the latest content/information, they start rebooting approximately every minute. The Windows message displayed is: “You’re about to be signed out”“Reinício agendado...

tlmarques by • L4 Transporter
  • 153 Views
  • 1 replies
  • 0 Likes

few remote users on global protect 6.2.8-c948 are facing connectivity issue "the network connection is unreachable or the portal is unresponsive

few remote users on global protect 6.2.8-c948 are facing connectivity issue "the network connection is unreachable or the portal is unresponsive. The global protect logs doesn't show any errors but users are facing difficulties connecting to the global protect VPN.

Throughput from CLI vs Dashboard

hello experts, I have pa-3220, want to upgrade to new model, quite satisfied with our existing throughput, max session and new session... how to find out those figures from CLI or rhe Web-UI? what to spot out or how to cater the traffic spike? What is the CLI commands? any other need to concerns? thanks.

Why is Connect Before Logon hidden behind a manual PanGPS -registerplap command?

Can someone at PAN explain the design decision here? The GlobalProtect portal exposes an impressive collection of settings—some useful, some spectacularly niche. The MSI also accepts enough properties to make deployment engineering its own part-time job. Yet enabling Connect Before Logon/PLAP somehow requires administrators to run this separat...

Panorama 11.2.3-h3 VMware Tools running but guest heartbeat remains red

Hello, We deployed a new Panorama virtual appliance from the official VMware OVA. The appliance is running PAN-OS 11.2.3-h3 on VMware vSphere/ESXi 7.0 Update 3. Panorama itself operates normally, and all management-plane processes are running. However, VMware reports that the guest heartbeat is continuously red, even though VMware Tools are show...

Guidance Required for VM-500 Redeployment in Azure Due to Root Partition Limitation

Hello All,We are running two VM-500 firewalls in Azure configured in an Active-Passive HA pair. Currently, we are encountering high root partition utilization on both firewalls.A TAC case was opened, and although some files were deleted to reduce disk usage, the root partition utilization remains high. Palo Alto TAC has informed us that to incre...

kganesh by • L0 Member
  • 96 Views
  • 1 replies
  • 0 Likes

false positive: UPX compressed libxml2.dll

Uncompressed libxml2.dll https://github.com/bleachbit/pygtkwin/releases/download/v2026-09-21/gtk3.24-x86-windows.zip zero detections in VirusTotal for hash c34024e57586677eae3cb6bbfbf4e5e6ccedeef2ec64d651d1995ab999315255 Compressed libxml2 unencrypted zip file VirusTotal a90b932ef4f06ad09951cba94a654101ef1705e0fa7e6b70c8a1807790049dc2 ...

ahz001 by • L0 Member
  • 62 Views
  • 0 replies
  • 0 Likes

Unable to Commit Changes after Installing New Certificate

I was asked to assist with a new wildcard certificate that was uploaded to the firewall yesterday, update the SSL/TLS Service Profile and confirmed settings for GP. Commit failed so began reviewing configuration. The 2 reasons listed for the failure were: client useridd phase 1 failureclient gp_broker phase 1 failure Double checking and the...

DJ_1924 by • L2 Linker
  • 99 Views
  • 1 replies
  • 0 Likes

Is it possible to have 2 portals and 2 gateways, each for different "VPN" connectivity and users?

Hi, hoping someone can guide me. I am trying to see if it's possible to have, basically, 2 VPN's on the same firewall. One portal/gateway would be for employees using radius/AD/DUO authentication and the new one would be for consultants. Same authentication methods although the consultants would be in a different AD group for auth/DUO. Basically...

Software NGFW Credits for Cloud NGFW

1 min read

Managing firewall resources across different deployment models should be flexible and straightforward. Customers using a combination of self-managed and Palo Alto Networks-managed Software NGFW products have traditionally had to manage separate credit models, adding complexity to purchasing and resource allocation. With Software NGFW Credits f...

JayGolf by • Community Team Member
  • 107 Views
  • 0 replies
  • 0 Likes

VPN with two subnets

Hello, We are using globalprotect for users to connect to our network, but recently we have another set of users that we would like to put them on a separate network. We created another profile on the Gateway specifying that if certain users, we have connection with SAML, should receive the IP address of the secondary subnet. We moved this p...

YParreno by • L1 Bithead
  • 171 Views
  • 3 replies
  • 0 Likes
Load more

Upcoming Fuel Events

Top Solution Authors
View All
Top Contributors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks