Coming soon to a Fuel Spark User Summit near you - Strata Cloud Manager topics!
Contains an image
Hello, everyone! One of Fuel's primary directives is bringing education and information to our...
Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our
Welcome Guide.
Hello, everyone! One of Fuel's primary directives is bringing education and information to our...
Meet PANCast™: Big cybersecurity topics. Shorter conversations. Practical insights you can actually ...
A technical look at Network Channels, the secure connectivity layer that lets Prisma AIRS AI Red Tea...
With Cloud NGFW Credit Unification, you can now use your existing Software NGFW (VM-Flex) credits to...
Join us for this fantastic topic from our Prisma SD-WAN team on updated and improved capabilities co...
Palo Alto Networks is introducing automated device telemetry enablement for eligible PAN-OS versions...
Advanced DNS Security Resolver (ADNSR) now supports DNS over TLS (DoT)! Learn how this enhancement s...
Discover what's new in Strata Cloud Manager (SCM)! Explore enhanced AI-powered search and actionable...
Cloud NGFW for AWS vs VM Series Firewall Feature Comparison (Updated October 2026) NGFW Deploym...
New URL Filtering Category: Browser-Runtime-Attack We intend to introduce a new category calle...
To better support the diverse and evolving nature of GenAI applications across websites, Palo Alto N...
To ensure a seamless transition for our customers, we have decided to delay the activation of the Co...
Ever wondered what all those mysterious parts inside your computer actually do? This blog is for you...
New URL Filtering Category: File-Converter We intend to introduce a new category called “File-C...
Learn at your own pace with free access to Fuel's Virtual Test Lab (VTL).
The Model Context Protocol (MCP), developed by Anthropic, provides a standardized approach to integr...
We would love to hear from you. Your feedback helps us improve the Fuel community!
Hello, everyone! One of Fuel's primary directives is bringing education and information to our...
Cloud NGFW for AWS vs VM Series Firewall Feature Comparison (Updated October 2026) NGFW Deploym...
View the slide presentation from our Success Office Hours that took place September 9, 2026. The ...
Preparing to implement Idira Secure Cloud Access? Palo Alto Networks Idira® is the next-generat...
🚀 Elevate Your Security Operations with the New Strata Cloud Manager Course. The complexi...
Maximize Your Cybersecurity Defenses with the New Palo Alto Networks Learning Subscription In ...
View the slide presentation from our Success Office Hours that took place August 27, 2026. The se...
Episode Transcript: John: Hello PANCasters and welcome back. Today we have Daniel back with u...
Join us for this fantastic topic from our Prisma SD-WAN team on updated and improved capabilities co...
Palo Alto Networks is introducing automated device telemetry enablement for eligible PAN-OS versions...
Advanced DNS Security Resolver (ADNSR) now supports DNS over TLS (DoT)! Learn how this enhancement s...
Discover what's new in Strata Cloud Manager (SCM)! Explore enhanced AI-powered search and actionable...
Come see our next Spark User Summit about one of the amazing CDSS components, Advanced IP Defense. J...
Join us for an upcoming Spark User Summit on October 15, 2026, where we cover how to align network s...
Watch our latest Spark User Summit where we hear from Priyanka Gauravdeep and Ashish Shah about why ...
OpenCode is an open-source, terminal-first AI coding agent. OpenCode supports agent-based interactio...
We have GlobalProtect Agent 6.2.8-c317 yesterday some users could connect but could not access network files or get on the internet. Other user no problem. Nothing changed on our network other then the GP VPN license expired 2 days ago even though we paid for the renewal 3 weeks ago. I am not a Palo Alto person and since I cannot get to support...
I recently found interesting behavior in GlobalProtect with pre-logon when using SAML. I started off by following these instructions: Remote Access VPN with Pre-Logon The customer I was working with had certificates in the user-store they did not want to access during pre-logon or user login. We specified "Machine" in the "Client Certificate ...
How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...
Hi everyone, I urgently need your help with a Cortex XDR configuration issue. We need to completely exclude specific directories from Cortex XDR activity, ensuring that the agent does not perform any scanning, analysis, injection, or other operations within those directories. Initially, we suspected that the issue was related to Exploit Pro...
Join us on November 5th, 2026 at 9:30 AM Pacific Time for this great event on new capabilities and updates coming to Prisma SD-WAN in FedRAMP. In this webinar, we will explore major platform enhancements in routing, policy, security, and simplified operations designed to streamline administration, reduce complexity, and keep your federal netwo...
Hi Community, I am encountering a status warning in the Cortex XDR Console for several endpoints and would appreciate your guidance. Status/Error Message: "Windows Security Center Integration status – Windows: Failure to register to Windows Security Center – agent works alongside Defender" Environment Details Operating System: Windows 11 Pro...
Hi All, waiting on official confirmation from PAN on this.. but has anyone to date done this? where you have a bvm in Azure and a bvm on-prem (esxi) and clustered them together? doable? i have concerns around hardware failure and the arp cache being cleared amongst other things.. thanks in adv
Hi community,We have an Azure active/passive pair running PAN-OS 10.2.2 / VM-Series plugin 3.0.2, without an active support contract.During failover, PA02 becomes active, but the floating IPs remain on PA01 and traffic fails. Azure authentication succeeds; NIC updates return HTTP 400 — MismatchingResourceName.Our findings:Firewall Azure NIC orde...
Hello Community, We are experiencing an issue with exporting Stats Dump file required for SLR report on PA-410 firewall.The option to export Stats Dump file is not available in web GUI, and the corresponding CLI command returns an "Invalid syntax" error. Environment:Firewall Model: PA-410PAN-OS Version: 11.2.13-h2 Could anyone please clarify...
Hello everyone, I've recently had an issue with my licensing and it was because the API key was expired. I generated a new one and everything worked out fine. Is there any way to get notified when it expires or orior to it expiring?
Hello, I am trying to configure PANOS(10.1.8) Integrated UserID with Wndows AD 2016 (with Kerberos). I am getting "Access Denied" status under User Mapping --Server Monitoring I have validated that user is part of below security groups on AD Distributed COM Users Event Log Readers Remote Management Users Server Operators I see below log...
Hi All, Current I had 2 pair firewall sit at different location and integrated with CIE. GP always on to DC-1 without any issue by using Entra ID grouping , since authenticated at DC-1 so DC-2 doesnt contain any user ip mapping information, so the security policies with groupping don work. What I tried 1. Data redistribution - It work with ...
Hi everyone, I’m troubleshooting a CIE group mapping issue on a firewall and would appreciate some advice. The setup is: PAN-OS 11.1.13-h9 Panorama-managed firewall CIE using Okta as the directory source Okta receives groups from both its own directory and MS Entra GP uses these groups in Portal Agent Config and Gateway configuration...
Hi Team, Recently we performed VM-Series NGFW PAN-OS upgrade from 11.2.7-h13 to 11.2.13 (which is deployed on GCP). Before upgrade ingress & egress traffic was working fine, post upgrade we faced issue with ingress traffic. For this issue we raise TAC ticket, we didn't not received any conclusive resolution. After reverting back to 11.2....
I want to deploy two firewalls on AWS, in different availability zones. I understand from the guide that this isn't recommended, but that it is supported. I've managed to complete the deployment without any issues. However, I have some questions. Since it’s not possible to move an ENI between AZs, if there’s a failure with FW-A or AZ-A, FW-B wil...

