• 529,873 Members
  • 1,088 Online
  • 1,133,493 Posts
  • 19,861 Solutions
  • 53,821 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

PA-5450 Dataplane CPU Utilization Discrepancy (GUI vs SNMP)

Attention: Global TPM team, Hello, Could you please clarify the relationship between the Dataplane CPU utilization shown in the GUI and the SNMP CPU OIDs on a PA-5450? It was observed that the GUI shows approximately 80% Dataplane CPU utilization, while hrProcessorLoad.2 (1.3.6.1.2.1.25.3.3.1.2.2) returns only 5-10%. Could you please con...

R.Tabira by • L1 Bithead
  • 20 Views
  • 0 replies
  • 0 Likes

Wrong classified URL

Hi, Can someone explain what the malware base DB is? Does the MLAV flag indicate that the file was classified as malware by the machine learning engine? If so, how can this classification be overridden or excluded? Thanks.

url_check.png
HeinzP by • L1 Bithead
  • 92 Views
  • 2 replies
  • 0 Likes

Resolved! Panorama SDWAN 3.2.0 - zone map menu missing

Hello, I'm currently deploying a new sdwan setup with Panorama(11.1.0(KVM))+sdwan_plugin(3.2.0) and noticed that the zone map menu doesn't exist, tested with different browsers(Chrome and Firefox) In the official documentation for the lasted plugin version, it's mentioned that the zone map menu still exists and in the release notes there isn...

leonarit by • L0 Member
  • 3959 Views
  • 4 replies
  • 1 Likes

Pre-Logon Behavior with SAML Login

I recently found interesting behavior in GlobalProtect with pre-logon when using SAML. I started off by following these instructions: Remote Access VPN with Pre-Logon The customer I was working with had certificates in the user-store they did not want to access during pre-logon or user login. We specified "Machine" in the "Client Certificate ...

DHCP Relay Source IP Address Behavior

Attention: Global TPM team, Could you please confirm the following DHCP Relay behavior? When a firewall acts as a DHCP Relay agent and forwards DHCPDISCOVER messages to a DHCP server as unicast packets, is the source IP address the IP address of the interface configured as the DHCP Relay agent? Also, if available, could you please share an...

R.Tabira by • L1 Bithead
  • 209 Views
  • 2 replies
  • 0 Likes

DecryptSSL Inboundwith SSL app no

I have just configured SSL Inbound for two servers and I'm seeing some unusual behavior. I can see random connections where the SSL "decrypted" flag is set to "NO" for SSL application. However, when the application is web browsing, it is always set to "YES".

Decrypt.jpg
BigPalo by • L4 Transporter
  • 109 Views
  • 1 replies
  • 0 Likes

Performance Issues & UI Lagging after Upgrade to Cortex XDR v5.2

Hello Community, We recently upgraded our tenant to Cortex XDR Cloud Management Console Version 5.2, and since the update, we are experiencing severe performance issues when trying to view data. The Symptoms: Failed Data Rendering: The main menus and sidebar tabs click open normally, but clicking on any dashboard leads to indefinite loading. Th...

Panorama SD-WAN Plugin Compatibility

Hello All! Seeking clarification on whether or not I need to upgrade my Panorama SD-WAN plugin. Currently, I am running PAN-OS 10.2.x and using SD-WAN plugin version 3.0.3. In the compatibility matrix the maximum PAN-OS version listed for this plugin version is "Latest". Does this refer to the latest version based on the minimal PAN-OS versio...

nohash4u by • L3 Networker
  • 78 Views
  • 0 replies
  • 0 Likes

Virtual Test Lab

1 min read

The Virtual Test Lab (VTL) offers an environment where users can practice and get familiar with the Palo Alto Networks Next-Generation Firewall. The pre-built lab environment provides access to a Windows Server OS, two Linux server OSes and a Palo Alto Networks Next-Generation Firewall. It allows users a fully isolated environment to freely con...

Masharad by • L4 Transporter
  • 124957 Views
  • 86 replies
  • 20 Likes

Resolved! CSP Customer Support Portal Down for Maintenance – 23 October 2026

Hello Community, We are unable to access the Palo Alto Networks Customer Support Portal: https://supportcases.paloaltonetworks.com/ The portal displays the following message: “This website is down for maintenance. Sorry for the inconvenience. We'll be back shortly.” We observed this issue on 23 October 2026 at approximately 10:44 AM IST. Could a...

Join Us in Welcoming LIVEcommunity's 2026-27 Cyber Elite Experts!

2 min read

Welcome back to another milestone year for our community! Every thriving cybersecurity community has its champions: the dedicated experts, problem-solvers, and mentors who consistently share their technical knowledge and elevate the conversation for everyone. Since 2020, the LIVEcommunity Cyber Elite program has been our way of celebrating the...

cyber_elite_2026_2027_landing_banner_1600x250-dark.jpg
JayGolf by • Community Team Member
  • 164 Views
  • 0 replies
  • 4 Likes

When connected to GP the internet connection goes to about 1meg

We have something of a sporadic issue. When some users connect to the VPN with GP their throughput drops to about a meg. It's just a handful of users. My home ISP, Metronet works just fine, a user a few miles away, also Metronet has this slow down so bad it's not usable. It's not just Metronet, we have seen this on AT&T and several other ISP...

Idira Identity Security Platform Upgrade

1 min read

Upgrade to the Idira Identity Security Platform Transitioning unified Idira Identity Security Platform (ISP)? Our latest guide outlines everything you need to know about the upgrade process, key features, and performance benefits. Click on the attached pdf below to learn more!

JayGolf by • Community Team Member
  • 157 Views
  • 0 replies
  • 0 Likes

ZSP for Managed K8s Customers Office Hours Slide Deck - October 2026

1 min read

View the slide presentation from our Success Office Hours that took place October 22, 2026. In this session, our product team walked through how Palo Alto Networks Idira® combines Zero Standing Privileges with a terminal-first workflow tailored for DevOps and Site Reliability Engineering (SRE) teams and ran a live demo. We also previewed the bro...

Upcoming Fuel Events

Top Solution Authors
Top Contributors