LIVEcommunity | Palo Alto Networks

Active Active High Availability

Hello Group, I have done migration from Cisco ASA Firewalls to Palo Alto Firewalls. In Cisco ASA Firewalls, I was using multi-context (there were two contexts, Context-A and Context-B). Context A was active on Firewall-1 and Context-B was active on F...

EWSv2 mark item as junk issue

Hi Guys Did anyone of you manage to mark emails as junk using !ews-mark-item-as-junk?I can get the item from the mailbox using the id and even mark it read / unread. But if I try to mark it as junk I get following error: Failed mark-item-as-junk with...

Total number of profiles

Hi, We have the problem with the total number of security profiles.As you can see in attached screenshot the maximum number of profiles is 100, for now we have 84, but when I tried to add new one I get the capacity error. Maybe someone had the same p...

Log Forwarding - are changes disruptive to PAN firewalls?

Hi Gang, We need to update our log forwarding to now include Syslog. Previously they were only uploading to Panorama. It was also previously shared but we will need to make it device group specific now as we have local syslog servers for local sites....

No Source User

After the .NET/User ID agent issue last week we upgraded the agents and managed to get our UserID mapping back so our firewall policies would work again. At this point I have user > IP mapping, all of my agents are connected and my user based firewal...

Correct way to upgrade Cortex XDR agent on Terminal Servers

Hi all,In our environment we have installed the Cortex agent on some terminal servers via the command line and with the TS_ENABLED = 1 attribute.Now it's time to update them to the latest version (7.4.0). The terminal policy provides for automatic up...

Global Protect pre-logon and user IP Pools

I'm wondering if anyone can help. We have global protect setup and i want to use the same IP Pool for pre-logon user's, and once authenticated have that same IP pool used for the user. So when i am setting this up in the client settings area of the G...

Advanced URL Filtering

Hi Anyone, Even I read these docs as below, I could not understand well.https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-new-features/url-filtering-features/advanced-url-filtering.htmlhttps://www.paloaltonetworks.com/apps/pan/public/downloadResou...

Cortex XDR Co-Existing with MDfE

Hi There,We have an Enterprise customer here in NZ who wants to have Cortex & Microsoft solutions on all their Windows 10 endpoints. So here is my query - Can Cortex XDR co-exist with Microsoft Defender for Endpoint on same endpoints and both operate...

Ransomware Prevention / Detection / Response Resources

There are many articles, guides, and resources available across various Palo Alto Networks properties to guide users on how to best protect their organizations from ransomware. After spending some time to find many of them, I thought I would share wi...

AD Group Mapping - Azure SAML Auth

Any documentation on how to setup AD Group Mapping when using Azure AD SAML instead of LDAP as the authentication source. I did configure the LDAP servers and am using the long-name in the group policies but the policies aren't mapping the user to th...

can I have multiple Def gateway IPs on single L3 interface?

I have a Layer3 interface on the firewall that is connected to a zone that hosts multiple subnets spread across the remote sites. I would like the firewall to block the intra-zone traffic in this. To do this, I will need to give the Firewall IP as th...

Connect to (2) different PAN environments at the same time

Hello all, Does Global Protect allow for making two concurrent connections to different environments at the same time? We have (2) pairs of PAN's in different data centers (on different subnets) and have a need for connecting to both environments at ...

Learn how to automate your SlashNext and Pcysys workflows with Cortex XSOAR!

Join me next week on Thursday, June 24th at 9 am PT when I will be hosting this live webinar and Q&A session on how to automate your SlashNext and Pcysys workflows! Register today.