Discover LIVEcommunity — Watch Now

(view in My Videos)

  • 511,090 Members
  • 2,913 Online
  • 1,123,996 Posts
  • 18,869 Solutions
  • 52,172 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Unable to revert local changes to aggregate interface

Hello all, I have an issue with a couple of HA Palo Alto firewalls managed by Panorama. I was doing some tests for LACP and I overrode the configuration of an aggregate interface enabling LACP. Then I disabled it again from the firewall GUI (not from Panorama - so I overrode my previous override, I think). The problem is that now, when I try t...

GGarolla by L1 Bithead
  • 3811 Views
  • 3 replies
  • 0 Likes

Redirect URL for Cortex XSOAR integration with DocuSign

When configuring the DocuSign new App and Keys for the integration with Cortex, what Redirect URL should be used? The documentation states the below. Set Redirect URI# Navigate to Additional Settings. Set the Redirect URI to https://localhost. I do get the Allow Access But after clicking I get the error Site con not be reach localhost refu...

dwight_thomas_0-1779967469163.png
dwight_thomas_1-1779967587486.png

Resolved! bioc not prevent

Hi everyone, i've created this bioc: dataset = xdr_data | filter event_type = ENUM.LOAD_IMAGE | filter ACTOR_PROCESS_COMMAND_LINE contains "netsh" and ACTOR_PROCESS_COMMAND_LINE contains "advfirewall" and ACTOR_PROCESS_COMMAND_LINE contains "set" and ACTOR_PROCESS_COMMAND_LINE contains "currentprofile" and ACTOR_PROCESS_COMMAND_LINE contains...

tlmarques by L4 Transporter
  • 89 Views
  • 1 replies
  • 0 Likes

New reports On-Demand BPA

Hello team:I have a question: Do you know what the new process will be for generating on-demand BPA reports via the Posture API in Strata Cloud Manager? Given the following message:“The On-Demand BPA dashboard will be deprecated on April 30, 2026. Please transition to the new Posture API to upload your configurations for an ”on-demand“ best prac...

Where to begin

Hello Team, I just joined the community. I am passonate about learning Paloalto firewall. Please can someone help guide mo on where to start? Pangsui Linge

Unable to ping to Secondary ISP IP from Primary ISP IP

Hello Everyone, I'm using two internet connections: a primary ISP and a secondary ISP. Is there a way to ping the public IP address of the secondary ISP from within the local network? I would appreciate it if you could share the configuration steps. Thank you so much!

URONMAPU by L1 Bithead
  • 94 Views
  • 0 replies
  • 0 Likes

Regarding existing logs when adding an extended disk to a VMFW using AWS.

We are considering adding (expanding) disk space. Previously, when we inquired with the manufacturer, we were told that, unlike ESXi, logs from the initial disk would not be automatically migrated when an expansion disk was added to a VMFW on AWS. However, the manufacturer representative who responded yesterday stated that the logs would be auto...

woody249 by L4 Transporter
  • 59 Views
  • 0 replies
  • 0 Likes

New Fake/Malicious Software Hosting Domain Detection

5 min read

Palo Alto Networks Advanced DNS Security Introduces New Detection: Fake and Malicious Software Hosting Domain Detection Author: Harsh Shah, Sr. Technical Marketing Engineer Palo Alto Networks Advanced DNS Security introduces new protection against fake and malicious software hosting domains. Our solution offers proactive, real-time detectio...

Screenshot 2026-05-26 at 7.56.04 PM.png
Screenshot 2026-05-26 at 7.58.20 PM.png
Screenshot 2026-05-26 at 7.59.07 PM.png
tbolatiwa by L4 Transporter
  • 143 Views
  • 0 replies
  • 0 Likes

Fetching CrowdStrike Next-Gen SIEM Alerts into SOAR

Hi everyone, How can I fetch Next-Gen SIEM alerts from CrowdStrike into XSOAR? I have already set up my Falcon integration, and I can fetch categories like endpoint detection. As seen in the image, there is a query section available to fetch different detections. Additionally, in the fetch types section, there are detection options such as endpo...

O.Isik by L0 Member
  • 5531 Views
  • 8 replies
  • 2 Likes

[FIREWALL] - Commit Issue

Hi everyone, I'd like to request support for a recent problem I'm having. I have one cluster with two Palo Alto firewalls, one of which was recently updated to version 11.1.13-h5 and is currently active, while the other is on version 11.1.13 and is passive. The environment is currently in this state because we are still validating version 11.1.1...

jobs.png
ErrorQueue.png

How to add exception for known macros detection by cortex XDR

We are facing alerts for some excel enabled macro files are getting blocked in local analysis which is known and signed. After certain time file verdict changed to benign but still its triggered in local analysis and user unable to execute it. Please help us how to unblock this without adding specific path under exception. Thanks

Cortex XDR Uninstallation

I want to uninstall an agent, but it is not getting uninstalled because of anti-tampering , The endpoint is not connected with in the network so if a set global uninstallation password can i delete the endpoint using uninstallation password .

Expedition Installation

We are planning to Install Expedition in our air-gaped network. Please let us know what are the communications to be allowed in firewall for tool installation in our network without any issues.

Sujanya by L3 Networker
  • 1913 Views
  • 3 replies
  • 0 Likes

Upcoming Fuel Events

Top Solution Authors
Top Contributors