• 530,836 Members
  • 1,061 Online
  • 1,133,910 Posts
  • 19,900 Solutions
  • 53,897 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

How to disable Telemetry?

How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...

2026-10-13_095412.png

About CVE-2026-91403

We are currently verifying whether we are affected by the Java-related vulnerability (CVE-2026-91403). 1. After reviewing Palo Alto’s security advisory,we were unable to confirm the existence of the Java-related vulnerability (CVE-2026-91403). Does this mean it has not yet been disclosed, or that we are not affected? 2. I checked the manufactu...

n-tomo by • L2 Linker
  • 138 Views
  • 1 replies
  • 0 Likes

XDR Collector Status on Dashboard

Hi Everyone, I'm having trouble finding a way to create a widget displaying the XDR Collector status and create a custom correlation rule for a disconnected XDR Collector. I'm not able to find the correct dataset to use in the query. I used Agentic Assistant and was not able to generate the query correctly Is this feasible on Cortex XDR Pro?

XDR Automation Rules not triggering Playbook execution

I am experiencing an issue with XDR Automation Rules when attempting to execute a script. I have configured an automation rule to trigger a Playbooks when a specific event occurs. The Playbook is designed to run the built-in Quick Action: “Run Endpoint Script”, which executes a script registered in Action Center > Scripts Library. However, th...

.522643 by • L1 Bithead
  • 1116 Views
  • 4 replies
  • 0 Likes

From Visibility to Installation: AI Agents for End-to-End Certificate Lifecycle Management in NGTS

4 min read

PKI and certificate teams are being asked to do more than ever. They need to keep track of CA configurations, certificate policy, which keys are too weak, and which certificates are quietly heading toward expiry. At the same time, the job keeps getting bigger. Certificate validity periods are shrinking toward 47 days with a milestone in March of...

mtycksen_0-1793258833480.png

False positive: generic.ml on DiskCleanupHelper.exe (Disk Cleanup Helper 1.1)

File Hash (SHA256): a0a3db7244e9eb1aa1d2aecab86276623352b5aa3d3f3335d3f734c09814ee04 Link to VirusTotal report: https://www.virustotal.com/gui/file/a0a3db7244e9eb1aa1d2aecab86276623352b5aa3d3f3335d3f734c09814ee04 Current VirusTotal verdict (Paloalto): generic.ml Requested verdict: benign Description: Disk Cleanup Helper 1.1 is a free, open-sou...

Submit false positive - Generic.ml -- 64 bit file brwtts.exe

File Hash: c721c79082cc7233405fc24ea2579b1aeed1d5eb41b938bf19bbf8384720298a Link to Virustotal report for the file: https://www.virustotal.com/gui/file/c721c79082cc7233405fc24ea2579b1aeed1d5eb41b938bf19bbf8384720298a Current VirustTotal Verdict: Generic.ml Description: Description: This 64 bit file is a component file of the text-to-speech s...

woeruw by • L2 Linker
  • 43 Views
  • 0 replies
  • 0 Likes

Submit false positive - Generic.ml 64 bit panopreter.exe

File Hash: e89ce9dbae627bc8918d9c689e69c959adcbcea92f9ec059fc2168749dbbbe11 Link to Virustotal report for the file: https://www.virustotal.com/gui/file/e89ce9dbae627bc8918d9c689e69c959adcbcea92f9ec059fc2168749dbbbe11 Current VirustTotal Verdict: Generic.ml Description: This 64 bit file is a component file of the text-to-speech software Pa...

woeruw by • L2 Linker
  • 45 Views
  • 0 replies
  • 0 Likes

Virtual Test Lab

1 min read

The Virtual Test Lab (VTL) offers an environment where users can practice and get familiar with the Palo Alto Networks Next-Generation Firewall. The pre-built lab environment provides access to a Windows Server OS, two Linux server OSes and a Palo Alto Networks Next-Generation Firewall. It allows users a fully isolated environment to freely con...

Masharad by • L4 Transporter
  • 125712 Views
  • 87 replies
  • 20 Likes

False Positive Submission (Generic.ml) – D2R-TPP-Demo-0.5.0-Setup.exe

Hello,I'm the developer of a fan-made mod for Diablo II: Resurrected. Palo Alto Networks detects my installer on VirusTotal as Generic.ml. I believe this is a false positive.File: D2R-TPP-Demo-0.5.0-Setup.exeSHA-256: 8d7c96528f1619aa91ceaa3cee5cf8ad9be381142771a1b75fe1fc728137004eVirusTotal: https://www.virustotal.com/gui/file/8d7c96528f1619aa91...

Malware detection

Hi Team, In our environment, a file was detected as malware. Based on the investigation, the file was downloaded using Firefox. We need to identify the exact source URL from which the file was downloaded. We have already checked the Causality Chain for the file, but multiple URLs are displayed, making it difficult to determine the actual downloa...

Master the Rollout: A Field-Tested Blueprint for Deploying GlobalProtect at Scale

7 min read

Master the Rollout: A Field-Tested Blueprint for Deploying GlobalProtect at Scale When migrating thousands of users to Palo Alto Networks GlobalProtect (whether via Prisma Access or on-premises firewalls), the biggest risk isn't the technology—it's the operational chaos of a rushed rollout. Palo Alto Networks Technical Services teams have led ...

Screenshot 2026-10-30 at 11.58.58 AM.png
Screenshot 2026-10-30 at 11.59.18 AM.png
Screenshot 2026-10-30 at 11.59.36 AM.png
rronco by • L2 Linker
  • 103 Views
  • 0 replies
  • 0 Likes

Clarification on Security Policy and Decryption Policy Processing Order

Attention: Global TPM TeamHello Team, I am reviewing PAN-OS packet processing behavior related to Security Policy and Decryption Policy evaluation. Based on the public documentation below, I understand that Security Policy lookup occurs during session setup and that traffic matching a Decryption Policy can be decrypted for further inspection...

Nimbus by • L1 Bithead
  • 232 Views
  • 2 replies
  • 1 Likes

Confirmation of Panorama 10.2.13-h7 Impact and PHP Version

Attention: Global TPM team, Regarding CVE-2026-109618 / CVE-2026-109619, could you please confirm the following? 1. What PHP version is included in Panorama 10.2.13-h7? 2. Can we understand that Panorama 10.2.13-h7 is affected by this issue and that 10.2.13-h27 (or later) is the fixed release for Panorama? Best Regards,

Nimbus by • L1 Bithead
  • 133 Views
  • 2 replies
  • 0 Likes

Upcoming Fuel Events

Top Solution Authors
Top Contributors