• 523,943 Members
  • 1,047 Online
  • 1,130,599 Posts
  • 19,596 Solutions
  • 53,347 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Guidance Required for VM-500 Redeployment in Azure Due to Root Partition Limitation

Hello All,We are running two VM-500 firewalls in Azure configured in an Active-Passive HA pair. Currently, we are encountering high root partition utilization on both firewalls.A TAC case was opened, and although some files were deleted to reduce disk usage, the root partition utilization remains high. Palo Alto TAC has informed us that to incre...

kganesh by L0 Member
  • 69 Views
  • 1 replies
  • 0 Likes

Unable to Commit Changes after Installing New Certificate

I was asked to assist with a new wildcard certificate that was uploaded to the firewall yesterday, update the SSL/TLS Service Profile and confirmed settings for GP. Commit failed so began reviewing configuration. The 2 reasons listed for the failure were: client useridd phase 1 failureclient gp_broker phase 1 failure Double checking and the...

DJ_1924 by L2 Linker
  • 63 Views
  • 1 replies
  • 0 Likes

Is it possible to have 2 portals and 2 gateways, each for different "VPN" connectivity and users?

Hi, hoping someone can guide me. I am trying to see if it's possible to have, basically, 2 VPN's on the same firewall. One portal/gateway would be for employees using radius/AD/DUO authentication and the new one would be for consultants. Same authentication methods although the consultants would be in a different AD group for auth/DUO. Basically...

Why is Connect Before Logon hidden behind a manual PanGPS -registerplap command?

Can someone at PAN explain the design decision here? The GlobalProtect portal exposes an impressive collection of settings—some useful, some spectacularly niche. The MSI also accepts enough properties to make deployment engineering its own part-time job. Yet enabling Connect Before Logon/PLAP somehow requires administrators to run this separat...

few remote users on global protect 6.2.8-c948 are facing connectivity issue "the network connection is unreachable or the portal is unresponsive

few remote users on global protect 6.2.8-c948 are facing connectivity issue "the network connection is unreachable or the portal is unresponsive. The global protect logs doesn't show any errors but users are facing difficulties connecting to the global protect VPN.

Software NGFW Credits for Cloud NGFW

1 min read

Managing firewall resources across different deployment models should be flexible and straightforward. Customers using a combination of self-managed and Palo Alto Networks-managed Software NGFW products have traditionally had to manage separate credit models, adding complexity to purchasing and resource allocation. With Software NGFW Credits f...

JayGolf by Community Team Member
  • 53 Views
  • 0 replies
  • 0 Likes

VPN with two subnets

Hello, We are using globalprotect for users to connect to our network, but recently we have another set of users that we would like to put them on a separate network. We created another profile on the Gateway specifying that if certain users, we have connection with SAML, should receive the IP address of the secondary subnet. We moved this p...

YParreno by L1 Bithead
  • 127 Views
  • 3 replies
  • 0 Likes

what is the difference between "commit to panorama" and "save changes"?

I do see commit and config options in Panorama. I am aware that commit option is used to push configuration to Panorama and then to Managed firewalls. I would like to know when to use "save changes" and what is it for under config options.if possible , Please also explain about Lock option. Lock option is used to lock commit when multiple users ...

perumalj by L2 Linker
  • 4031 Views
  • 2 replies
  • 0 Likes

Why Reliability in AI Applications Is Now a Competitive Differentiator

6 min read

AI has moved beyond pilots and proofs of concept. It now underpins critical applications across industries, from powering customer experiences to automating internal workflows. As AI becomes foundational to business operations, expectations around its reliability have shifted accordingly. The cost of downtime is no longer theoretical. Recent out...

How to Add Enterprise Controls to Open WebUI: Cost Tracking, Access Governance, and Runtime Security

5 min read

Open WebUI is a widely adopted open-source platform for deploying self-hosted AI interfaces. For platform teams and IT administrators managing shared Open WebUI instances, however, a critical gap remains: while Open WebUI handles user-facing AI interactions effectively, it does not currently include the centralized operational and security co...

n8n Best Practices: Adding AI Policies Across Workflow Automation

8 min read

n8n handles workflow orchestration well in small-scale setups. The picture changes when AI Agent nodes begin calling LLMs across shared teams and environments. Token usage is hard to track, provider credentials are spread across configurations, and workflows depend on model endpoints without any policy layer governing what gets sent or returne...

avayadav by L1 Bithead
  • 96 Views
  • 0 replies
  • 0 Likes

AI Cost Observability: A Practical Guide to Understanding and Managing LLM Spend

10 min read

In most organizations, model access has scaled faster than cost visibility. Teams know their total monthly spend but not which model, prompt, or workspace is responsible for it. This lack of granularity makes optimization reactive rather than strategic. AI cost observability bridges that gap. It brings clarity to the most opaque part of AI opera...

tshenoi by L1 Bithead
  • 96 Views
  • 0 replies
  • 0 Likes

GitHub Copilot Best Practices for Teams: Securing AI-Assisted Development at Scale

7 min read

GitHub Copilot feels simple when a few developers use it. When entire engineering teams depend on it daily, and platform engineers are expected to explain who is using it, how requests are routed, and where usage appears across environments, operational complexity grows quickly. At this stage, Copilot becomes part of your shared AI infrastructur...

FWs no longer forwarding logs to Panorama

Not sure what happened but it seems that all my firewalls stop sending logs to panorama (local log collector). I have a ticket open with PAN support but not really getting anywhere. Recently upgraded PANORAMA to 11.1.13-h3 and added additional collector disks to PANORAMA. Also forwarded logs from PANORAMA log collector to our syslog serv...

drewdown_0-1788476521190.png
drewdown_2-1788476742998.png
drewdown_1-1788476583659.png
drewdown_3-1788476808559.png
drewdown by L4 Transporter
  • 66 Views
  • 0 replies
  • 0 Likes

Upcoming Fuel Events

Top Solution Authors
Top Contributors