Securing Transport: Introducing DNS over TLS (DoT) Support for Advanced DNS Security Resolver (ADNSR)

This blog was written by Harsh Shah, Sr. Technical Marketing Engineer As enterprise networks expand across complex hybrid environments, securing Domain Name System (DNS) traffic has become a critical priority. For network operators and security teams, relying on traditional, unencrypted DNS protocols creates significant privacy and data manipu...

Finding What You Need, Faster: Meet the New AI-Powered Search and Copilot Navigation in Strata Cloud Manager!

This blog was written by Zamin Ali Salman, Sr. Product Manager If you manage network security day in and day out, you know that efficiency isn't just a convenience—it's a requirement. When you need to troubleshoot a policy, configure a new gateway, or find specific technical guidance, you don't have time to navigate through multiple menus or s...

Virtual Test Lab

The Virtual Test Lab (VTL) offers an environment where users can practice and get familiar with the Palo Alto Networks Next-Generation Firewall. The pre-built lab environment provides access to a Windows Server OS, two Linux server OSes and a Palo Alto Networks Next-Generation Firewall. It allows users a fully isolated environment to freely con...

Coming soon to a Fuel Spark User Summit near you - Strata Cloud Manager topics!

Hello, everyone! One of Fuel's primary directives is bringing education and information to our members to make your lives easier. As Fuel has become more active over the last several years, we are getting more and more support from different units within Palo Alto Networks and we cannot be more thrilled. Whether it is working with our amaz...

Automating Tasks in PA

Hello, Is there a way to automate tasks in Palo Alto PANORAMA? For example, I want to create a script that allows me to add a “bulk list of objects”—including both IP addresses and domains—and then add them to an existing group. The goal is to automate the blocking of security bulletins that arrive in our email inboxes every day. Doing this manu...

Clarification on Strata Logging Service and eDLP Log Forwarding

Hi Team, We are an MSSP and have received a request to support eDLP. Since we do not have access to these devices/services in our environment, we primarily rely on the available documentation to understand and support them. I have a few questions regarding how Strata Logging Service (SLS) works. We currently support Prisma Access using SLS. Wh...

Claude AI Activity and False Positive Alerts

Hello, Recently, I’ve been noticing quite a few false positive alerts related to the use of Claude AI. I’m investigating these alerts and trying to understand exactly what Claude is doing on the endpoint. I would like to review the command history and the actions performed by the application, but I cannot find enough information directly in the ...

Cloud NGFW for AWS vs VM Series Firewall Feature Comparison

Cloud NGFW for AWS vs VM Series Firewall Feature Comparison (Updated October 2026) NGFW Deployment & Management Description Cloud NGFW for AWS VM-Series Native Management Panorama Management Strata Cloud Manager Cloud-Native Cloud NGFW for AWS is a cloud-native regional service similar to other AWS services. This resour...

How deactivate multi factor authentication

Cortex XDR Post-Quantum

Hi team, I would like to inquire about formal information and guidance regarding the post-quantum cryptography (PQC) strategy within the Cortex XDR ecosystem. What developments, features, or updates planned on the Cortex roadmap could you share with us? Is there currently any functionality, pilot, or integration in the console or agents that add...

Introducing the NEW Palo Alto Networks Certified Network Security Architect

Get ready to validate your expertise at the highest level. Palo Alto Networks is thrilled to announce the launch of our first Architect-level certification, the Palo Alto Networks Certified Network Security Architect. This new certification is designed for experienced professionals who lead the way in cybersecurity design. It goes beyond techn...

Need help in validating XQL query to identify suspicious MFA registration from new GEO location + new device

dataset = okta_sso_raw| filter (debugContext contains "New Geo-Location=POSITIVE" and debugContext contains "New Device=POSITIVE") and (eventType in("user.mfa.factor.activate", "user.lifecycle.create", "system.import.user.create"))| alter user_id = if(eventType = "user.lifecycle.create" or eventType = "system.import.user.create", json_extract_sc...

GlobalProtect VPN not working on T-Mobile Home Internet

Over the past couple of weeks we have been getting more and more support tickets stating that our users can't connect to GlobalProtect VPN. The one common thread they have is they all have T-Mobile Home Internet. Has anyone else noticed this? Is there a fix or workaround? Thank you.

Best Practice Configuration for SD-WAN Policy

Hi Everyone, I'm currently designing SD-WAN policies for our Palo Alto environment and would appreciate hearing about real-world best practices and deployment experience. I'm trying to determine which applications and traffic types should be assigned to Best Available Path versus Weighted Session Distribution. My current thinking is: Best Avail...