• 530,587 Members
  • 1,084 Online
  • 1,133,814 Posts
  • 19,892 Solutions
  • 53,885 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

False Positive Submission (Generic.ml) – D2R-TPP-Demo-0.5.0-Setup.exe

Hello,I'm the developer of a fan-made mod for Diablo II: Resurrected. Palo Alto Networks detects my installer on VirusTotal as Generic.ml. I believe this is a false positive.File: D2R-TPP-Demo-0.5.0-Setup.exeSHA-256: 8d7c96528f1619aa91ceaa3cee5cf8ad9be381142771a1b75fe1fc728137004eVirusTotal: https://www.virustotal.com/gui/file/8d7c96528f1619aa91...

Master the Rollout: A Field-Tested Blueprint for Deploying GlobalProtect at Scale

7 min read

Master the Rollout: A Field-Tested Blueprint for Deploying GlobalProtect at Scale When migrating thousands of users to Palo Alto Networks GlobalProtect (whether via Prisma Access or on-premises firewalls), the biggest risk isn't the technology—it's the operational chaos of a rushed rollout. Palo Alto Networks Technical Services teams have led ...

Screenshot 2026-10-30 at 11.58.58 AM.png
Screenshot 2026-10-30 at 11.59.18 AM.png
Screenshot 2026-10-30 at 11.59.36 AM.png
rronco by • L2 Linker
  • 32 Views
  • 0 replies
  • 0 Likes

Clarification on Security Policy and Decryption Policy Processing Order

Attention: Global TPM TeamHello Team, I am reviewing PAN-OS packet processing behavior related to Security Policy and Decryption Policy evaluation. Based on the public documentation below, I understand that Security Policy lookup occurs during session setup and that traffic matching a Decryption Policy can be decrypted for further inspection...

Nimbus by • L1 Bithead
  • 184 Views
  • 2 replies
  • 0 Likes

Confirmation of Panorama 10.2.13-h7 Impact and PHP Version

Attention: Global TPM team, Regarding CVE-2026-109618 / CVE-2026-109619, could you please confirm the following? 1. What PHP version is included in Panorama 10.2.13-h7? 2. Can we understand that Panorama 10.2.13-h7 is affected by this issue and that 10.2.13-h27 (or later) is the fixed release for Panorama? Best Regards,

Nimbus by • L1 Bithead
  • 65 Views
  • 2 replies
  • 0 Likes

Global Protect Intelligent Portal

Hi All, we are upgrading our users from GP client 6.0.3 to 6.3.3 to take advantage of Intelligent Portal. We currently only have one portal at our head office NGFW. Just need to confirm that Intelligent portal would work if we add more portals at our global offices, upgrade the GP clients and add the registry entries required on the client mach...

Impact of "Sync to HA Peer" During PAN-OS Image Synchronization

Attention: Global TPM Team Hello Team, General product behavior question. When using "Sync to HA Peer" to synchronize a PAN-OS software image to an HA peer, are there any known service impacts or operational impacts (traffic forwarding, session handling, HA operation, management-plane performance, etc.) during the synchronization process? ...

Nimbus by • L1 Bithead
  • 223 Views
  • 2 replies
  • 0 Likes

Modern PAM for Linux & Migrating to Secrets Rotation Service (SRS) Office Hours Slide Deck - October 2026

1 min read

View the slide presentation from our Success Office Hours that took place October 28, 2026. In this session, our product team explored the future of identity security through two key topics: Modern PAM for Linux and the migration from Central Policy Manager (CPM) to Secrets Rotation Service (SRS). The session included a live demo of the Modern P...

GlobalProtect iOS devices and Passkeys

We are currently on 11.1.13 HF 12 and using GlobalProtect 6.3.6 on iOS devices, Passkeys work on our SAML portal for Windows machines, but iOS devices do not connect, has anyone seen this and if so how did you fix it? The Microsoft MFA Authenticator app worked fine for iOS devices but once Passkeys were enabled, they could not connect.

Wrong classified URL

Hi, Can someone explain what the malware base DB is? Does the MLAV flag indicate that the file was classified as malware by the machine learning engine? If so, how can this classification be overridden or excluded? Thanks.

url_check.png
HeinzP by • L2 Linker
  • 178 Views
  • 4 replies
  • 1 Likes

What does Portkey Error Code 033 mean, and how can it be resolved for MCP Gateway access?

IssueWhy does an Active Service Gateway API Key with MCP → INVOKE permission receive HTTP 403 / Portkey Error Code 033 when invoking MCP servers provisioned to the same admin-automation workspace in Strata Cloud Manager (SCM)?Environment / BackgroundI am evaluating the PRISMA AIRS / AI Gateway MCP functionality in an SCM trial tenant.A Tumor Boa...

XDR Automation Rules not triggering Playbook execution

I am experiencing an issue with XDR Automation Rules when attempting to execute a script. I have configured an automation rule to trigger a Playbooks when a specific event occurs. The Playbook is designed to run the built-in Quick Action: “Run Endpoint Script”, which executes a script registered in Action Center > Scripts Library. However, th...

.522643 by • L1 Bithead
  • 1079 Views
  • 3 replies
  • 0 Likes

armoury xsoar

I am trying to access Xsoar for case surveys, right now it says I am unauthorized. please point me in right direction if this is not the place.

Upcoming Fuel Events

Top Solution Authors
Top Contributors