Discover LIVEcommunity — Watch Now

(view in My Videos)

  • 509,693 Members
  • 2,238 Online
  • 1,123,370 Posts
  • 18,795 Solutions
  • 52,018 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

TS-Agent 11.1.1 Compatibility

The Compatibility Matrix shows that TS-Agent 11.1.0 is compatible with (only) Citrix XenApp 7.x According to the matrix, the TS-Agent 11.1.1 is not compatible with ANY version of Citrix XenApp Is this correct? Has TS-Agent 11.1.1 deprecated all support for Citrix? There is nothing in the release notes to suggest this which would seemto be a...

djr_0-1776240529102.png
djr by L4 Transporter
  • 218 Views
  • 1 replies
  • 0 Likes

EDL MS Intune All URL misses an entry

Dear all We got a question assigned about the PaloAlto EDL for MS Intune, the EDL "MSIntune All URL" (accessible via https://saasedl.paloaltonetworks.com/feeds/msintune/all/url). By 30th of April 2026, Microsoft added the URL "lgmsapeswiss.blob.core.windows.net" to her list, which can be reviewed here: Network endpoints for Microsoft Intune - ...

How to get access to the knowledgebase articles (SSO Error)

Hello community, Has anybody experienced an issue with getting access to the knowledgebase articles recently? I am being redirected to a login page each time when try to open a link to the article provided by Google in search results. Once I successfully log in I get the same "Single Sign-On Error" with a text (https://knowledgebase.paloaltonetw...

dh by L0 Member
  • 340 Views
  • 3 replies
  • 1 Likes

Virtual Test Lab

The Virtual Test Lab (VTL) offers an environment where users can practice and get familiar with the Palo Alto Networks Next-Generation Firewall. The pre-built lab environment provides access to a Windows Server OS, two Linux server OSes and a Palo Alto Networks Next-Generation Firewall. It allows users a fully isolated environment to freely con...

Masharad by L3 Networker
  • 103329 Views
  • 52 replies
  • 15 Likes

Cannot add BIOC rule to restriction profiles

Hello, I'm receiving malware incidents with files signed by the same signer entity. However, Cortex XDR often only detects these files without blocking them. I want to prevent this behavior by creating a BIOC rule that detects processes with that specific signer and converting it into a prevention rule. However, when I try to add the BIOC rule...

SAlves_0-1778845767968.png
S.Alves by L0 Member
  • 146 Views
  • 1 replies
  • 1 Likes

traffic disruption on routing change

hi folks, I deleted a vlan subinterface from the VR config and from the ospf redist options. after comitting the change we had a partial service disruption where sessions where dropped. I can see a visible drop in thoughput but not in number of sessions. according to monitoring traffic I can says that it lasted roughly 15 seconds which is quite ...

How to Post a LIVEcommunity Discussion

Are you ready to become a conversation starter? If you have searched for an answer, topic, or query and have not found what you’re looking for, then your next step might be to post a discussion. There are many ways to post a message to the discussion areas on the LIVEcommunity. Let’s go through them together. Posting a Discussion from the Hom...

jforsythe_0-1633695177715.png
jforsythe_1-1633695177826.png
jforsythe by Community Team Member
  • 8408 Views
  • 3 replies
  • 1 Likes

Resolved! XSIAM - Data Patterns

Hi. Please, a question about Data Patterns in Cortex XSIAM. Once the connection from the Broker VM to the Windows server (SMB) is configured, the connection is verified and displayed under Modules -> Data Security -> Storage Buckets, how is it linked to previously created Data Patterns and Data Profiles?. Thank you in advanced. Regards.

Log partition SNMP OID deleted when AWS VM Series Logging disk space are added

Hi, nice to meet you. I recently expanded the logging disk space on my VM-Series firewall following the official Palo Alto Networks Knowledge Base article (link below). KB Reference: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PNuACAW&lang=en_US I noticed a strange side effect with SNMP monitoring. The specifi...

ssublue_1-1779092069962.png
ssublue_0-1779091849628.png
ssublue by L0 Member
  • 32 Views
  • 0 replies
  • 0 Likes

False positive High-Risk classification for legitimate healthcare SaaS (gmedic.co)

Hello, https://gmedic.co is a legitimate healthcare SaaS platform used by healthcare professionals in Colombia. The domain is correctly categorized as Health-and-Medicine, however it is currently flagged as High-Risk. We already verified:- no malicious content- no phishing- no malware- clean reverse IP- dedicated legitimate hosting The issue see...

Resolved! How to request review of residual High-Risk rating when category dispute has been resolved?

I am the volunteer webmaster for Berkshire Family History Society, a UK registered charity. I am seeking guidance on the correct process for requesting review of a Risk Level rating when the URL category dispute has already been resolved. The history is straightforward. On 11 May 2026 our domain berksfhs.org was classified by PAN-DB as Malware...

Does Prisma Browser support device-based Conditional Access (device ID / compliance)?

Hi all, I’m currently investigating an issue with Prisma Access Browser (Android) in combination with Microsoft Entra Conditional Access and wanted to check if anyone has faced something similar. Setup: - Prisma Browser deployed via Intune (Android Enterprise, fully managed/BYOD) - Company Portal installed and device properly enrolled - Micr...

SeriThal by L0 Member
  • 125 Views
  • 0 replies
  • 0 Likes

I have a question CVE-2026-0256 PAN-OS

Hello. I have a question regarding this vulnerability. The vulnerability description states that a malicious authenticated administrator could save a payload via XSS. If that is the case, wouldn't the vulnerability itself be fine as long as the Permitted IP is properly configured? However, I do not quite understand why the suggested solution inv...

Upcoming Fuel Events

Top Solution Authors
Top Contributors