• 522,875 Members
  • 2,643 Online
  • 1,130,051 Posts
  • 19,540 Solutions
  • 53,268 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

User-id mapping domain name issue

Hi everyone, I recently set up GP user-id mapping in our network. It's showing domain.local\username in the logs. I was also told to set up User-ID mapping using the windows agent as well since our users would need to disconnect from GP occasionally. The logs that we get from the windows agent is domain\username. Issue now is that when we se...

Firewall not connecting to Strata Logging Service

Hi everyone, I've started setting up the Strata logging service and I've added in the necessary app-ids. After adding the app-ids and with destination any, it started sending out the logs to Strata without any issues. We currently have an issue when we try to add in the FQDNs either as an address group or url category that the firewall just w...

RPerez481389_0-1787812617479.png

XSIAM HTTP Log Collector Testing

Hello everyone, We are currently considering to us a HTTP Log Collector. However, before this can be started, I wanted to test the collection. Now, in theory, this should not be hard, due to the examples provided after setting up the integration. Nonetheless, either the Python Example is faulty in some way, or I am being exceedingly stupi...

Create an issue when FIM events detected

Hello experts, We plan to get the FIM module on top of my XDR. Having set up with FIM Profile and Policy, we could be able to see those events successfully. with the following information: 2. Dataset and Presets for FIM Dataset: xdr_data XQL Filter:dataset = xdr_data | filter fim_event = true Console: Inventory → Endpoints → File Integrity...

Enable user context cloud service

Hi team, today I was trying to enable a simple checkbox in my firewall in Device - Setup - PANOS Edge Service Settings - Enable user context cloud service, but when I enable it and try to click on OK nothing happens. I think that it could be because I need specific licensing in order to enable that. Could you tell if that's correct and if that's...

Global Protect 6.3.3 Issues

I am on Global Protect Version 6.3.3-1121. I can connect on my Windows Device just fine. On a Mac version 26.6.2 when i try to connect, the client says "you are redirected to an embedded browser to authenticate and connect". It just stays there and never connects

XDR agent reboot recover everytime

Hi guys, Recently, we identified several computers running Cortex XDR version 9.2.0.120 with Content Version 2340-38788. After the machines start, connect to the tenant, and receive the latest content/information, they start rebooting approximately every minute. The Windows message displayed is: “You’re about to be signed out”“Reinício agendado...

tlmarques by L4 Transporter
  • 37 Views
  • 0 replies
  • 0 Likes

Cortex XDR JDP method instrumentation causing severe Java runtime slowness (agent 9.2.0.120) — follow-up to solved cyjagent crash thread

This is a follow-up to a previously solved thread: Cortex XDR cyjagent.dll injection causes JVM startup crash, where @susekar confirmed the known JDP/JVM conflict (CPATR-38467 / CPATR-18158). Thanks for that confirmation. Since the solution there is already accepted, raising this as a separate topic: we've now observed a second symptom from the ...

Max limit for URL Categories in a single Security Policy Rule?

Hi everyone, I'm trying to find the exact maximum limit for how many URL Categories (predefined + custom) can be added as match conditions in a single Security Policy Rule (under the Service/URL Category tab). Checking the official capacity limits documentation (specifically for VM-500), I see limits for total custom URL categories (500 per VSYS...

Non-Persistent VDI – File Collection and Investigation with XDR

Hi everyone, I need some help/advice. I’ve been seeing some cases on non-persistent VDIs where we receive alerts such as “Script Engine Activity - 3121803131”. Basically, the Cortex XDR alert is related to an HTML file hosted on a ShareFile share that I don’t have access to. From what I understand, the HTML file is essentially a web-page templat...

tlmarques by L4 Transporter
  • 18 Views
  • 0 replies
  • 0 Likes

My Panorama account is locked. Is there any way to fix this?

Hello Team, There are two saved configurations: one before the password expired and one after. The Panorama is currently factory reset, and the session disconnected immediately after inserting the pre-expiration configuration. No commit was performed at that time. Is there another way to handle this? Thank you, Best Regards.

Vulnerability scan showing CVE-2008-4309 - SNMP 'GETBULK' Reflection DDoS

Not seeing anything on this anywhere I search. Nessus is showing CVE-2008-4309 - SNMP 'GETBULK' Reflection DDoS on our PA-1410 on 11.0.3-h10. Nessus was able to determine the SNMP service can be abused in an SNMPReflection DDoS attack :Request size (bytes) : 42Response size (bytes) : 2341 Not sure what I should do to remedy this alert. Than...

ZTNA Connector — Tunnel remains Inactive despite active Control Plane (NFR tenant)

Hello Evryone, I'm tring to deploy a ztna connector on my home lab to prepare different use case for customer demo and i still have the same issue. Environment: Tenant type: NFR ZTNA Connector deployed on-prem via KVM (Proxmox VE), two-arm deployment Connector image: 200v-6.2.9-ztna-connector-b3-kvm.qcow2 (and try with 6.2.5 same issue) Port 1...

Fuel User Group: A Year of Growth, Connection, and Community

3 min read

FY26 is officially in the books! Our fiscal year wrapped up, and it was a big year for the Fuel User Group community. It was a year of expansion for our global community. We welcomed more members, added new user groups, and launched our free educational programming in new regions. Most importantly, we created more ways for users to participat...

Inforgraphic_final.png
Masharad by L3 Networker
  • 350 Views
  • 5 replies
  • 7 Likes

Resolved! Factory reset

If I perform a factory reset on PA500 OS 8.1, eill I loose the licensing?

Ladynet by L1 Bithead
  • 9115 Views
  • 7 replies
  • 0 Likes

Upcoming Fuel Events

Top Solution Authors
Top Contributors