• 531,354 Members
  • 1,353 Online
  • 1,134,067 Posts
  • 19,918 Solutions
  • 53,917 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Prisma Acess Agent EPM issue

I have a PAA agent installed onto a Windows machine and when the vpn tunnel is down the EPM status is up and working but as soon as we bring the vpn tunnel up the EPM status goes down indicating a SSL handshake failed, now ive eliminated DNS issue with/without tunnel, all good, ive disabled dencryption of any *.gpcoudservice.com traffic within p...

Broker VM image migration (Ubuntu 20.04 → Debian 13+): does the WEC server certificate carry over, or do WEF client certs need reinstalling?

Hi everyone, We’re about to migrate our Broker VMs to the new image and I’d like to hear from anyone who has already done this with the Windows Event Collector (WEC) applet in play. Our setup: Cortex XSIAM, 6 Broker VMs on 31.100.2, running Ubuntu 20.04.6 LTS. Per the “Upgrade Broker VM” docs, nodes on an old image (Ubuntu 20.04 or earlier) mus...

Need Policy for MS System Center

Dear All Need help. Recently, we have observed that the Palo Alto firewall shows an alert on the dashboard when a Microsoft System Center user tries to scan and push updates from their workstation. This is routine work for some support users. If it happens regularly, we report this alert and inform higher management why it happens. But it doesn...

rockbd by • L0 Member
  • 71 Views
  • 1 replies
  • 0 Likes

What Is "GPCS-sc-interfw-rule" on Log Prisma Access

Hi everyone, I recently set up a Service Connection (SC) via Strata Cloud Manager (SCM), and the tunnel is successfully established. To test the policies, I disabled the rule allowing traffic from SCM to the Peer DC (Firewall). Currently, I'm experiencing a one-way communication issue: GlobalProtect (GP) users cannot ping or access apps in the...

R.PUTRA by • L0 Member
  • 92 Views
  • 1 replies
  • 0 Likes

Unable to Create a New Support Case – Portal Access Issue

Hi Team, I am encountering the error message shown in the attached screenshot when trying to create a new support case. After logging into the portal, when I attempt to create a case for one of my customers, I receive the attached error message. Could you please look into this issue and help me resolve it? Please let me know if you need any addi...

Trying the DNSProxy feature for Static Response

Hie, Situation - Wanted to kaminsky the DNS Responses for my client from the FWComplication - None of the dig are responded Need your help on this? Client Requests for Promise/Spoofed IP keviv@keviv-VMware-Virtual-Platform:~$ ifconfig ens37ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500inet 192.168.21.21 netmask 255.255.255.0 ...

ocpfn4 by • L0 Member
  • 601 Views
  • 1 replies
  • 0 Likes

What does Portkey Error Code 033 mean, and how can it be resolved for MCP Gateway access?

IssueWhy does an Active Service Gateway API Key with MCP → INVOKE permission receive HTTP 403 / Portkey Error Code 033 when invoking MCP servers provisioned to the same admin-automation workspace in Strata Cloud Manager (SCM)?Environment / BackgroundI am evaluating the PRISMA AIRS / AI Gateway MCP functionality in an SCM trial tenant.A Tumor Boa...

Upcoming Change: Telemetry Enablement for Eligible PAN-OS NGFWs

3 min read

Overview Palo Alto Networks is enabling device telemetry on eligible PAN-OS NGFWs to help improve threat detection, enhance visibility into device health, and accelerate support case resolution. This update is rolling out in three waves. If your firewall meets the criteria below, telemetry will be enabled automatically and no further action i...

Upcoming Change.png
gagsingh by • L2 Linker
  • 2110 Views
  • 13 replies
  • 6 Likes

Broker-VM cluster with BVMs on different platforms

Hi All, waiting on official confirmation from PAN on this.. but has anyone to date done this? where you have a bvm in Azure and a bvm on-prem (esxi) and clustered them together? doable? i have concerns around hardware failure and the arp cache being cleared amongst other things.. thanks in adv

PA_nts by • L4 Transporter
  • 130 Views
  • 1 replies
  • 0 Likes

New to SCM and PA and have questions.

I am new to PA and SCM so I am learning at I go. I am working with PA-520s for hardware. I started working within the PAN-OS and had a great working config. I am now trying to manually move that config into SCM since there is not migration path. I have been somewhat successful in this but have a few questions that I am nto understanding. ...

When Trust Changes: Building Cryptographic Agility Into Certificate Management

12 min read

Why continuous certificate visibility, automated lifecycle management, and flexible CA relationships are essential to maintaining digital trust. Digital trust is built on relationships between certificates, cryptographic keys, certificate authorities (CAs), and the systems that rely on them. Every secure website connection, authenticated appli...

alharris_0-1793805567001.png
alharris by • L1 Bithead
  • 120 Views
  • 0 replies
  • 1 Likes

PA-5450 Dataplane CPU Utilization Discrepancy (GUI vs SNMP)

Attention: Global TPM team, Hello, Could you please clarify the relationship between the Dataplane CPU utilization shown in the GUI and the SNMP CPU OIDs on a PA-5450? It was observed that the GUI shows approximately 80% Dataplane CPU utilization, while hrProcessorLoad.2 (1.3.6.1.2.1.25.3.3.1.2.2) returns only 5-10%. Could you please con...

Nimbus by • L2 Linker
  • 197 Views
  • 3 replies
  • 0 Likes

Upcoming Fuel Events

Top Solution Authors
Top Contributors