• 530,246 Members
  • 1,528 Online
  • 1,133,639 Posts
  • 19,874 Solutions
  • 53,861 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

External Entra-ID users gets 'Something went wrong'

I have an external guest who gets a Microsoft error while logging into GP. The error simply states "Something went wrong please try again" In the GP logs, I see On the Entra-ID logs, nothing. I asked the user to uninstall/reinstall the GP client, but the user in overseas so I wont hear back until tomorrow. I'm running panos 11.2.16 and GP...

MSullivan271926_0-1793118978670.png

SSL Decryption Causing Issues with Office 365

Currently working on a deployment with a few test users utilizing SSL decryption before it's rolled out to a wider user base. Decryption is working for the most part with the required exceptions in place, but having some issues with O365 apps no longer working after it was implemented. I had created an EDL and also explicitly added some Micros...

DJ_1924 by • L2 Linker
  • 105 Views
  • 4 replies
  • 0 Likes

[SOLVED] Prisma Access - Some Websites Are Unaccesible When Connects Only to Colombia Central Gateway

Hello, LiveCommunity team! I'm writing to share my experience regarding a web access error that occurs when our mobile users are connected to our "Colombia Central Gateway," which is deployed via SCM. When users connect to the "Colombia Central Gateway" and attempt to access the following websites: bancodeoccidente.com.cobancodebogota.com/person...

DanielSRomero_1-1793126043378.png

DecryptSSL Inboundwith SSL app no

I have just configured SSL Inbound for two servers and I'm seeing some unusual behavior. I can see random connections where the SSL "decrypted" flag is set to "NO" for SSL application. However, when the application is web browsing, it is always set to "YES".

Decrypt.jpg
BigPalo by • L4 Transporter
  • 130 Views
  • 2 replies
  • 0 Likes

Critical Recommendations for Deployment Guides: How to Secure the Management Access to your Palo Alto Networks Device

3 min read

Protecting your network begins with a secure firewall deployment. It is very important to secure the management interface and management network to prevent exploitation. So even when an attacker knows the login credentials of your devices, you can still prevent them from getting in. Best practice is to use the out-of-band (mgt) port for the fi...

Critical-Recommendations_palo-alto-networks.jpg
kiwi_2-1644404311924.png
kiwi_3-1644404637500.png
kiwi_4-1644405391906.png
kiwi by • Community Team Member
  • 237373 Views
  • 11 replies
  • 25 Likes

SDWAN alerts email notifications

Hello - can anyone point me to the steps to send email notifications for when SDWAN devices and sites generate alerts? We have hunted all over Strata Cloud Manager, and have successfully sent test emails via the "Incidents" configuration area, but we cannot figure out how to tie the SDWAN ION devices and SDWAN sites (both branch and data cen...

Questions about how to implement always on Primsa access VPN

We are looking to move all devices that connect to our Prisma Access environment to move to always on VPN. We attempted to do this once and caused the clients to black hole traffic. We are looking to use our internal certificate authority and each device has its own signed certificate for authentication for pre-logon. Is there a way we can limi...

J.Keefe by • L0 Member
  • 177 Views
  • 1 replies
  • 0 Likes

Testing CIE and user-id mapping question

Hi everyone, We currently use LDAP on our NGFW, with User-ID mappings coming from the Windows User-ID Agent and GlobalProtect. We’re looking at moving to CIE, as we plan to move away from on-premises AD in the future. Can CIE be configured alongside our existing LDAP setup so we can initially test it with only a specific Microsoft Entra ID group...

Performance Issues & UI Lagging after Upgrade to Cortex XDR v5.2

Hello Community, We recently upgraded our tenant to Cortex XDR Cloud Management Console Version 5.2, and since the update, we are experiencing severe performance issues when trying to view data. The Symptoms: Failed Data Rendering: The main menus and sidebar tabs click open normally, but clicking on any dashboard leads to indefinite loading. Th...

GlobalProtect v6.3 on Android

Hi, When attempting to download the GlobalProtect App from the Google Play Store, the default version hosted in the store is 6.3.5. This is in direct contradiction to the compatibility matrix, which suggests Android only supports up to GlobalProtect v6.Where Can I Install the GlobalProtect App? As such, upon installing the App, users encount...

Unable to sign in to GP - Mac OS 27.0.1

Hi, As the title says, I can not sign in to GP. Everything seemed to work fine until this morning when I turned on the computer. Everything is up to date, everything seems ok in Company portal as well. The device appears as unregistered when trying to log in (see attached screenshot), though Company Portal is saying the device meets company com...

popa472 by • L0 Member
  • 262 Views
  • 2 replies
  • 0 Likes

Join Us in Welcoming LIVEcommunity's 2026-2027 Cyber Elite Experts!

2 min read

Welcome back to another milestone year for our community! Every thriving cybersecurity community has its champions: the dedicated experts, problem-solvers, and mentors who consistently share their technical knowledge and elevate the conversation for everyone. Since 2020, the LIVEcommunity Cyber Elite program has been our way of celebrating the...

cyber_elite_2026_2027_landing_banner_1600x250-dark.jpg
JayGolf by • Community Team Member
  • 372 Views
  • 2 replies
  • 7 Likes

Upcoming Fuel Events

Top Solution Authors
Top Contributors