Issue with ChatGPT

Hello, after installation of ChatGPT client on Windows Clients users are reporting performance issues.Problems are also reported after updating the ChatGPT App.Builtin Snipping Tool (Win+Shift+S) takes about 10 seconds.Powershell takes 10 seconds to open a shell window and continues loading (blinking "|") for up to 30 minutes until any command...

Hi everyone, How to PAM Self-hosted connect to AWS CLI?

PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP

Subject: PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP We have a PA-460 running PAN-OS 11.1.10-h1. Our GlobalProtect portal and gateway are both bound to ethernet1/1 on the same public IP, using TCP 443. Authentication is handled through Duo SAML. We need to expose an internal HTTPS/WCF application on TCP 443...

Palo Alto Firewall Upgrade from PAN-OS 10.2.10 to 11.2.10-h14 – Upgrade Path Confirmation and Feedback

I am planning to upgrade our Palo Alto firewalls from PAN-OS 10.2.x to 11.2.10-h14.Our environment consists of a firewall HA pair, and we do not have Panorama. Before proceeding with the upgrade, I would appreciate your feedback on the following:Has anyone experienced any issues during the upgrade from PAN-OS 10.2.x to 11.2.10-h14?Are there any ...

GlobalProtect v6.3 on Android

Hi, When attempting to download the GlobalProtect App from the Google Play Store, the default version hosted in the store is 6.3.5. This is in direct contradiction to the compatibility matrix, which suggests Android only supports up to GlobalProtect v6.Where Can I Install the GlobalProtect App? As such, upon installing the App, users encount...

CVE-2026-98432 impact on PAN-OS 11.1.13-h12 and 11.2.10-h14

Attention: Global TPM team, CVE-2026-98432 was recently published as a Linux kernel vulnerability. Could you please confirm whether PAN-OS 11.1.13-h12 and 11.2.10-h14 are affected by this vulnerability? I could not find any Palo Alto Networks Security Advisory related to this CVE. Thank you.

Idira EPM Onboarding Success Strategies eBook

Deploying Endpoint Privilege Manager (EPM) doesn't have to mean trading off security for user friction. Whether you are planning your initial deployment or looking to streamline policy management, this guide outlines the proven roadmap to enforce least privilege without disrupting day-to-day operations. What you’ll find inside: Proven Impl...

IDIRA SIA Target validation failure

While i am using the IDIRA SIA to connect to a windows Server using ZSP policy, I am getting Certificate validation failed error. In the global Settings, i have disabled the target validation. Somehow it is still ding the target validation. Anyone else face this problem ? Can you suggest where else i can check ?

IAM Role for Secondary IP move between Palo Alto Firewalls in AWS

Hi All, We have two PA firewalls in AWS in a HA (Active / Standby) using secondary IP move. After an OS on both firewalls, secondary IPs are not moving back to FW01. Can someone please review following IAM role and confirm this will work in our scenario. Please also mention do i need following two in IAM parameters for secondary IP move?"ec2:Att...

Google captcha error

Most of the users are getting captcha error in google.com Wondering why PA is not blocking such requests. Will the DOS policy in PA help prevent such unlimited outbound queries? Page says our systems have detected unusual traffic from your computer network.

Migration Panorama from ESXi to Nutanix AHV

We're currently looking at replacing our VMWare ESXi hypervisors with Nutanix AHV hypervisors. We are currently using Panorama in VM mode. 1. Do you know whether Panorama is Nutanix AHV-compatible? Does the publisher support the Nutanix AHV hypervisor (or Redhat KVM)? 2. If yes, does Panorama support migration from VMWare to Nutanix AHV with Nut...

PA-505 ZTP Onboarding to SCM, Can I move back to trad MGMT Port

Hi everyone, I deployed a PA-505 via ZTP to SCM; it worked great, and I moved it to the required folder. This is a remote simplified deployment for the customer. I am now looking to deploy more this way, some with HA I have seen issues with the passive fire via the ZTP port. So want to avoid hiccups and also if we can easiely go back to the...

Strata Cloud Management

Hi Team, We have recently migrated all of our firewalls to Strata Cloud Manager and are currently working through the identified incidents and recommended posture improvements. During this process, we have encountered an issue where certain features and configuration settings are not visible within Strata Cloud Manager, despite being available...

Announcing Availability of Palo Alto Networks VM-Series for the AWS European (EU) Sovereign Cloud

This blog was written by: Kanthi Sarella, Chintan Udeshi In an era where data sovereignty and operational autonomy are critical, organizations across Europe face a unique challenge: Innovating rapidly in the cloud while adhering to stringent EU regulations. With the general availability of the AWS European Sovereign Cloud (ESC), organizatio...

Is there a way to configure Pan-OS to integrate with an ACME server for certificate enrollment?

Hello, I am working with an IPsec VPN setup on my Palo Alto Networks firewall and am currently using certificate-based authentication. My organization utilizes an internal Certificate Authority (CA) that supports ACME (Automatic Certificate Management Environment) for certificate enrollment. However, I haven't been able to find any resources or ...