• 526,503 Members
  • 1,250 Online
  • 1,131,807 Posts
  • 19,720 Solutions
  • 53,544 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Undecided application

In our environment, some webpages are not accessible. (This site can’t be reached) When I monitor the session browser, there is "undecided" in the Application column. I have attached the screenshot. Please help me to solve this issue.

gdu_palo by • L1 Bithead
  • 58 Views
  • 2 replies
  • 0 Likes

Virtual patching iand PANOS Shield n PANOS 12.2

Hello , Joined the webinar and amazed by the Virtual patching concept, We are using PA-1410, except the ATP+ lic and PANOS upgrade to v12.2 other technical prerequisites, more technical information to share? cannot find in the official doc https://docs.paloaltonetworks.com/network-security/security-policy/administration/security-profiles/... Do ...

Pre-Logon Behavior with SAML Login

I recently found interesting behavior in GlobalProtect with pre-logon when using SAML. I started off by following these instructions: Remote Access VPN with Pre-Logon The customer I was working with had certificates in the user-store they did not want to access during pre-logon or user login. We specified "Machine" in the "Client Certificate ...

Issue with the PANOS Version 11.1.4-h7

Hi Friends, We have a customer who is experiencing issues after upgrading their firewall to version 11.1.4-h7. The firewall is not functioning properly, with many websites being inaccessible and few customer reported a sudden spike in management plane usage. I suspect this could be due to a bug in this PAN-OS version, as multiple customers hav...

SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3

We are experiencing an issue with SSL decryption on a PA-520 running PAN-OS 12.1.7-h3. After enabling decryption, the firewall operates normally for approximately three hours. However, over time, the number of decryption failures gradually increases until all new connections are rejected. Disabling decryption immediately restores normal operatio...

How to block all AI-based applications

Hi Team, 1) We have a customer who wants to block all AI-based applications but the applications are not getting blocked.2) Initially, we created a application group policy in Security Policy and added all AI-based applications with action as deny. After commit the AI applications were getting blocked successfully. However, Claude AI was still a...

Commit Failed

Hello , I am using a Palo Alto PA-5220 running software version 10.2.11-h12, and I am currently experiencing an issue with Commit Failed and Dynamic Updates. For the Antivirus/Threats dynamic updates, I have configured the schedule to Download, and the download completes successfully. However, the update is not being installed automatically. Cou...

Commit-Failed.png
Karaked by • L1 Bithead
  • 235 Views
  • 4 replies
  • 0 Likes

Prisma Access as a Replacement for GlobalProtect and Security Inspection Platform – Seeking Real-World Feedback

Hello Everyone, We are currently evaluating Prisma Access as a replacement for our traditional GlobalProtect deployment and are considering using Prisma Access as our primary cloud-delivered security platform for remote users. Our goal is to leverage the full security stack, including: URL Filtering WildFire DNS Security Advanced Threat Preve...

Addition of a DPC on a 5450 causing packet loss

Hello Everyone, Hope you all are doing well. I have a question regarding an issue we experienced after adding a new DPC to a firewall. After installing a new DPC in Slot 6 and changing the session distribution method to Session Load, the firewall started experiencing connectivity issues with the router and peer IP addresses. We observed a signif...

wally4 by • L2 Linker
  • 27 Views
  • 0 replies
  • 0 Likes

Meet PANCast™: Practical Cybersecurity Insights, One Episode at a Time

1 min read

Looking for practical cybersecurity insights without having to work through a lengthy article or training course? PANCast™ features short, focused conversations with Palo Alto Networks experts to help you get more from your security solutions. Each episode explores a specific cybersecurity topic, offering guidance you can apply to your day-to-d...

PANCast_header.png
Masharad by • L4 Transporter
  • 210 Views
  • 2 replies
  • 1 Likes

Panorama Using Groups in Policy

Hi Team, When i am trying to add the Group i dont see it as a group but as a User in the policy i am creating in the Panorama. May i know what could be the issue? Regards, Sanjay S

Resolved! Palo Alto Networks false positive 'Generic.ml' for b64.exe on VirusTotal

virustotal.com reports a false positive detection of 'Generic.ml' for the 'Palo Alto Networks' engine for this file: https://www.virustotal.com/gui/file/28b1072fa457a6291eb86935ffee0527a1446c55a6070fabd825ce918f64f0ab File: b64.exeSHA256 hash: 28b1072fa457a6291eb86935ffee0527a1446c55a6070fabd825ce918f64f0abDownload link: https://github.com/B...

bstewart by • L1 Bithead
  • 352 Views
  • 7 replies
  • 0 Likes

Cortex XDR Linux Agent: IPC error 107 caused by SELinux denying execution of pmd

Cortex XDR Linux Agent – IPC error 107 / traps_pmd.service failed to start Environment Palo Alto Networks Cortex XDR Agent for Linux Oracle Linux SELinux: Enforcing /opt: XFS /opt was mounted without noexec Symptoms After installing the Cortex XDR Agent, cytool status failed with: Failed to get status summary data from the agent, err...

Upcoming Fuel Events

Top Solution Authors
Top Liked Authors
Top Contributors