• 529,927 Members
  • 1,246 Online
  • 1,133,531 Posts
  • 19,864 Solutions
  • 53,829 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Github EDLs missing IPs?

Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...

PA-1410 on 12.1.10-h2 troubleshooting for PAN-282032

Hi, we are currently running a PA-1410 on PAN-OS 12.1.10-h2. The workaround provided to mitigate PAN-282032 says to run the following command: debug dataplane sw-asic dump flow-table info When we run the above command, we get an invalid syntax error. Does anyone know if this workaround works for a PA-1410? Known Issue - PAN-282032 Any advi...

Join Us in Welcoming LIVEcommunity's 2026-27 Cyber Elite Experts!

2 min read

Welcome back to another milestone year for our community! Every thriving cybersecurity community has its champions: the dedicated experts, problem-solvers, and mentors who consistently share their technical knowledge and elevate the conversation for everyone. Since 2020, the LIVEcommunity Cyber Elite program has been our way of celebrating the...

cyber_elite_2026_2027_landing_banner_1600x250-dark.jpg
JayGolf by • Community Team Member
  • 179 Views
  • 1 replies
  • 4 Likes

Wrong classified URL

Hi, Can someone explain what the malware base DB is? Does the MLAV flag indicate that the file was classified as malware by the machine learning engine? If so, how can this classification be overridden or excluded? Thanks.

url_check.png
HeinzP by • L2 Linker
  • 100 Views
  • 3 replies
  • 0 Likes

GlobalProtect Frequent Disconnect and Reconnect Issue for Some Users

Hello Community,We are experiencing an issue where GlobalProtect frequently disconnects and reconnects in a loop for some Windows users.The issue is intermittent. More than 90% of our users are working normally, while fewer than 10% are experiencing the frequent disconnect/reconnect behavior.For the affected users, GlobalProtect connects success...

PA-5450 Dataplane CPU Utilization Discrepancy (GUI vs SNMP)

Attention: Global TPM team, Hello, Could you please clarify the relationship between the Dataplane CPU utilization shown in the GUI and the SNMP CPU OIDs on a PA-5450? It was observed that the GUI shows approximately 80% Dataplane CPU utilization, while hrProcessorLoad.2 (1.3.6.1.2.1.25.3.3.1.2.2) returns only 5-10%. Could you please con...

R.Tabira by • L1 Bithead
  • 29 Views
  • 0 replies
  • 0 Likes

Resolved! Panorama SDWAN 3.2.0 - zone map menu missing

Hello, I'm currently deploying a new sdwan setup with Panorama(11.1.0(KVM))+sdwan_plugin(3.2.0) and noticed that the zone map menu doesn't exist, tested with different browsers(Chrome and Firefox) In the official documentation for the lasted plugin version, it's mentioned that the zone map menu still exists and in the release notes there isn...

leonarit by • L0 Member
  • 3960 Views
  • 4 replies
  • 1 Likes

Pre-Logon Behavior with SAML Login

I recently found interesting behavior in GlobalProtect with pre-logon when using SAML. I started off by following these instructions: Remote Access VPN with Pre-Logon The customer I was working with had certificates in the user-store they did not want to access during pre-logon or user login. We specified "Machine" in the "Client Certificate ...

DHCP Relay Source IP Address Behavior

Attention: Global TPM team, Could you please confirm the following DHCP Relay behavior? When a firewall acts as a DHCP Relay agent and forwards DHCPDISCOVER messages to a DHCP server as unicast packets, is the source IP address the IP address of the interface configured as the DHCP Relay agent? Also, if available, could you please share an...

R.Tabira by • L1 Bithead
  • 211 Views
  • 2 replies
  • 0 Likes

DecryptSSL Inboundwith SSL app no

I have just configured SSL Inbound for two servers and I'm seeing some unusual behavior. I can see random connections where the SSL "decrypted" flag is set to "NO" for SSL application. However, when the application is web browsing, it is always set to "YES".

Decrypt.jpg
BigPalo by • L4 Transporter
  • 112 Views
  • 1 replies
  • 0 Likes

Performance Issues & UI Lagging after Upgrade to Cortex XDR v5.2

Hello Community, We recently upgraded our tenant to Cortex XDR Cloud Management Console Version 5.2, and since the update, we are experiencing severe performance issues when trying to view data. The Symptoms: Failed Data Rendering: The main menus and sidebar tabs click open normally, but clicking on any dashboard leads to indefinite loading. Th...

Panorama SD-WAN Plugin Compatibility

Hello All! Seeking clarification on whether or not I need to upgrade my Panorama SD-WAN plugin. Currently, I am running PAN-OS 10.2.x and using SD-WAN plugin version 3.0.3. In the compatibility matrix the maximum PAN-OS version listed for this plugin version is "Latest". Does this refer to the latest version based on the minimal PAN-OS versio...

nohash4u by • L3 Networker
  • 79 Views
  • 0 replies
  • 0 Likes

Virtual Test Lab

1 min read

The Virtual Test Lab (VTL) offers an environment where users can practice and get familiar with the Palo Alto Networks Next-Generation Firewall. The pre-built lab environment provides access to a Windows Server OS, two Linux server OSes and a Palo Alto Networks Next-Generation Firewall. It allows users a fully isolated environment to freely con...

Masharad by • L4 Transporter
  • 124985 Views
  • 86 replies
  • 20 Likes

Resolved! CSP Customer Support Portal Down for Maintenance – 23 October 2026

Hello Community, We are unable to access the Palo Alto Networks Customer Support Portal: https://supportcases.paloaltonetworks.com/ The portal displays the following message: “This website is down for maintenance. Sorry for the inconvenience. We'll be back shortly.” We observed this issue on 23 October 2026 at approximately 10:44 AM IST. Could a...

Upcoming Fuel Events

Top Solution Authors
Top Contributors