This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • 530,122 Members
  • 1,643 Online
  • 1,133,623 Posts
  • 19,874 Solutions
  • 53,853 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Testing CIE and user-id mapping question

Hi everyone, We currently use LDAP on our NGFW, with User-ID mappings coming from the Windows User-ID Agent and GlobalProtect. We’re looking at moving to CIE, as we plan to move away from on-premises AD in the future. Can CIE be configured alongside our existing LDAP setup so we can initially test it with only a specific Microsoft Entra ID group...

Critical Recommendations for Deployment Guides: How to Secure the Management Access to your Palo Alto Networks Device

3 min read

Protecting your network begins with a secure firewall deployment. It is very important to secure the management interface and management network to prevent exploitation. So even when an attacker knows the login credentials of your devices, you can still prevent them from getting in. Best practice is to use the out-of-band (mgt) port for the fi...

Critical-Recommendations_palo-alto-networks.jpg
kiwi_2-1644404311924.png
kiwi_3-1644404637500.png
kiwi_4-1644405391906.png
kiwi by • Community Team Member
  • 232019 Views
  • 10 replies
  • 25 Likes

SSL Decryption Causing Issues with Office 365

Currently working on a deployment with a few test users utilizing SSL decryption before it's rolled out to a wider user base. Decryption is working for the most part with the required exceptions in place, but having some issues with O365 apps no longer working after it was implemented. I had created an EDL and also explicitly added some Micros...

DJ_1924 by • L2 Linker
  • 76 Views
  • 3 replies
  • 0 Likes

[SOLVED] Prisma Access - Some Websites Are Unaccesible When Connects Only to Colombia Central Gateway

Hello, LiveCommunity team! I'm writing to share my experience regarding a web access error that occurs when our mobile users are connected to our "Colombia Central Gateway," which is deployed via SCM. When users connect to the "Colombia Central Gateway" and attempt to access the following websites: bancodeoccidente.com.cobancodebogota.com/person...

DanielSRomero_1-1793126043378.png

Performance Issues & UI Lagging after Upgrade to Cortex XDR v5.2

Hello Community, We recently upgraded our tenant to Cortex XDR Cloud Management Console Version 5.2, and since the update, we are experiencing severe performance issues when trying to view data. The Symptoms: Failed Data Rendering: The main menus and sidebar tabs click open normally, but clicking on any dashboard leads to indefinite loading. Th...

External Entra-ID users gets 'Something went wrong'

I have an external guest who gets a Microsoft error while logging into GP. The error simply states "Something went wrong please try again" In the GP logs, I see On the Entra-ID logs, nothing. I asked the user to uninstall/reinstall the GP client, but the user in overseas so I wont hear back until tomorrow. I'm running panos 11.2.16 and GP...

MSullivan271926_0-1793118978670.png

GlobalProtect v6.3 on Android

Hi, When attempting to download the GlobalProtect App from the Google Play Store, the default version hosted in the store is 6.3.5. This is in direct contradiction to the compatibility matrix, which suggests Android only supports up to GlobalProtect v6.Where Can I Install the GlobalProtect App? As such, upon installing the App, users encount...

Unable to sign in to GP - Mac OS 27.0.1

Hi, As the title says, I can not sign in to GP. Everything seemed to work fine until this morning when I turned on the computer. Everything is up to date, everything seems ok in Company portal as well. The device appears as unregistered when trying to log in (see attached screenshot), though Company Portal is saying the device meets company com...

popa472 by • L0 Member
  • 243 Views
  • 2 replies
  • 0 Likes

Join Us in Welcoming LIVEcommunity's 2026-2027 Cyber Elite Experts!

2 min read

Welcome back to another milestone year for our community! Every thriving cybersecurity community has its champions: the dedicated experts, problem-solvers, and mentors who consistently share their technical knowledge and elevate the conversation for everyone. Since 2020, the LIVEcommunity Cyber Elite program has been our way of celebrating the...

cyber_elite_2026_2027_landing_banner_1600x250-dark.jpg
JayGolf by • Community Team Member
  • 318 Views
  • 2 replies
  • 6 Likes

Register Now: Spark User Summit: The Value of Strata Cloud Manager and Your Journey from Panorama

1 min read

Join us on November 19th, 2026 at 9:30 AM Pacific Time for the first of many Strata Cloud Manager sessions we have planned. This first session is going to concentrate on key benefits, licensing options , deployment and operational models, and phased migration strategies and best practices to help you plan a smooth transition. Click here to re...

Spark User Summit - November 19, 2026 - The Value of Strata Cloud Manager and Your Journey from Panorama - Register Now.png

How to disable Telemetry?

How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...

2026-10-13_095412.png

Github EDLs missing IPs?

Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...

PA-1410 on 12.1.10-h2 troubleshooting for PAN-282032

Hi, we are currently running a PA-1410 on PAN-OS 12.1.10-h2. The workaround provided to mitigate PAN-282032 says to run the following command: debug dataplane sw-asic dump flow-table info When we run the above command, we get an invalid syntax error. Does anyone know if this workaround works for a PA-1410? Known Issue - PAN-282032 Any advi...

Wrong classified URL

Hi, Can someone explain what the malware base DB is? Does the MLAV flag indicate that the file was classified as malware by the machine learning engine? If so, how can this classification be overridden or excluded? Thanks.

url_check.png
HeinzP by • L2 Linker
  • 115 Views
  • 3 replies
  • 0 Likes
Load more

Upcoming Fuel Events

Top Solution Authors
View All
Top Contributors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks