• 525,749 Members
  • 1,168 Online
  • 1,131,516 Posts
  • 19,695 Solutions
  • 53,482 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Spark User Summit: Prisma SD-WAN and Post-Quantum Cryptography

2 min read

Join us for one of our upcoming Spark User Summit events on either September 30th or October 1st, 2026. In this session, we will be hearing from Priyanka Gauravdeep (speaker) and Ashish Shah (moderator) about how PANW is delivering quantum-resistant network architecture with Post-Quantum Cryptography in Prisma SD-WAN 6.8.1. As quantum compu...

Spark User Summit - September, October, 2026 - SD-WAN and PQC.png

SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3

We are experiencing an issue with SSL decryption on a PA-520 running PAN-OS 12.1.7-h3. After enabling decryption, the firewall operates normally for approximately three hours. However, over time, the number of decryption failures gradually increases until all new connections are rejected. Disabling decryption immediately restores normal operatio...

Palo Alto Networks false positive 'Generic.ml' for b64.exe on VirusTotal

virustotal.com reports a false positive detection of 'Generic.ml' for the 'Palo Alto Networks' engine for this file: https://www.virustotal.com/gui/file/28b1072fa457a6291eb86935ffee0527a1446c55a6070fabd825ce918f64f0ab File: b64.exeSHA256 hash: 28b1072fa457a6291eb86935ffee0527a1446c55a6070fabd825ce918f64f0abDownload link: https://github.com/B...

bstewart by L1 Bithead
  • 142 Views
  • 4 replies
  • 0 Likes

ARM (Graviton) PAYG listing with Advanced Threat Prevention: on the roadmap?

We run the VM-Series on AWS, x86, purchased self-serve through AWS Marketplace as "VM-Series Next-Gen Virtual Firewall w/Advanced Threat Prevention (PAYG)". We would like to move to Graviton, but the licensing doesn't line up. The ARM PAYG listing (prodview-cjfzbdnaojqci) names no security subscription and no 24/7 premium support. Both x86 PAYG ...

b3ll1s by L0 Member
  • 29 Views
  • 0 replies
  • 0 Likes

Not able to login to Windows due to Global Protect not being connected

So even if Global protect was connected before a logout, sometimes it wont let my AD users login to the computer at all saying We could not authenticate with the server basically, and few times if i let it sit for 10 seconds it will connect and im able to login without that error message. Is there any way to fix this? or any one experience somet...

J.Hiett by L0 Member
  • 64 Views
  • 1 replies
  • 0 Likes

Google captcha error

Most of the users are getting captcha error in google.com Wondering why PA is not blocking such requests. Will the DOS policy in PA help prevent such unlimited outbound queries? Page says our systems have detected unusual traffic from your computer network.

google2.jpeg
ceapen01 by L2 Linker
  • 3937 Views
  • 4 replies
  • 0 Likes

Virtual Test Lab

1 min read

The Virtual Test Lab (VTL) offers an environment where users can practice and get familiar with the Palo Alto Networks Next-Generation Firewall. The pre-built lab environment provides access to a Windows Server OS, two Linux server OSes and a Palo Alto Networks Next-Generation Firewall. It allows users a fully isolated environment to freely con...

Masharad by L3 Networker
  • 120398 Views
  • 70 replies
  • 19 Likes

Rate Limiting for LLM Applications and Agents: Why It Matters and How to Implement It

8 min read

Your team launches a new LLM-powered feature. An autonomous agent begins orchestrating multi-step workflows across providers. Early tests look promising, but as usage grows, token consumption spikes. Without centralized controls, a single runaway application or agent can exhaust shared infrastructure capacity for all other consumers on the platf...

amenon by L1 Bithead
  • 72 Views
  • 0 replies
  • 0 Likes

empty HIP after last Microsoft updates (09.2026)

Hi, Following the recent Microsoft updates KB5124008 and KB5126052, we have observed a significant issue with GlobalProtect’s operation, manifested by the transmission of empty or invalid HIPs. PANOS version 10.2.16-h6 (but also on 11.2.10-h13—I was in the middle of the update but rolled back to limit its impact). GP client version—primarily 6.3...

JacekL by L2 Linker
  • 340 Views
  • 4 replies
  • 0 Likes

Allowing GlobalProtect connection via Source user

Hi everyone, Our staff occasionally goes abroad and they still need to be able to work. At the moment, we need to ask them to check their Public IP and then we whitelist that. This gets a bit cumbersome, especially if they're going to 3-4 countries in 2 weeks. Is there a way to allow them to connect to GP if it identifies that it's a particula...

Commit Failed

Hello , I am using a Palo Alto PA-5220 running software version 10.2.11-h12, and I am currently experiencing an issue with Commit Failed and Dynamic Updates. For the Antivirus/Threats dynamic updates, I have configured the schedule to Download, and the download completes successfully. However, the update is not being installed automatically. Cou...

Commit-Failed.png
Karaked by L1 Bithead
  • 147 Views
  • 2 replies
  • 0 Likes

VM-Series on AWS (c8i.xlarge, PAN-OS 12.1.7-h3, T1-8GB) – "Number of sessions supported" is 65536, docs say 300,000

Hi all, I'm running a VM-Series on AWS c8i.xlarge (4 vCPU / 8 GiB) with PAN-OS 12.1.7-h3.c8i is documented as supported from PAN-OS 12.1.3, so the instance/version combination should be fine.The max session count is much lower than documented, and I can't find why. > show system info | match "vm-|sw-version"vm-license: VM-SERIES-4vm-cap-tier:...

MDM Posture Checks for Prisma Access Agent

1 min read

MDM Posture Checks for Prisma Access Agent Organizations that manage device compliance through a mobile device management (MDM) solution such as Microsoft Intune or Jamf can now use that compliance status to control whether the Prisma® Access Agent is authorized to establish a tunnel to Prisma Access.When a device is not enrolled in or is out ...

JayGolf by Community Team Member
  • 816 Views
  • 1 replies
  • 1 Likes

Palo Alto Networks Advanced WildFire now supports inline prevention for CMD, CHM, and CAB file-based malware

5 min read

This blog was written by Pradeep Pokhariyal, Principal Product Manager Introduction Threat actors have fundamentally refined their tradecraft. Rather than relying on easily flagged artifacts like raw executables or macro-enabled Office files, modern adversaries increasingly weaponize native Windows utilities and built-in administrative forma...

Strata Graphics (1).jpg
JayGolf by Community Team Member
  • 349 Views
  • 0 replies
  • 0 Likes

Upcoming Fuel Events

Top Solution Authors
Top Liked Authors
Top Contributors