PA-410 how to configure DHCP client WAN without a default static route required

PA-410 - PAN-OS 12.1.7 Internal interface dhcp server configured. External interface dhcp client configured with "auto create default route pointing to default gateway provide by provider" button checked. Create the Policy for web browsing zone internal to zone external with applications web-browsing, ssl and dns. Create the source NAT Policy ac...

PA 1410 MGMT port will not establish a 1000/FULL connection to Nexus 9k

We noticed that the management port of our PA1410s will not negotiate to 1000/FULL when connected to a Nexus 9k switch port (Not a quad, normal port). Using the same cable, if we connect a laptop to the PA it negotiates to 1000. Same if we connect a laptop to the same switch port. This was attempted with two different 6e cables. Same result. ...

LoV/ Sanitation Plan

Hi. Is there an official LoV or Sanitiation protocol for the PA-445's?

Migration from checkpoint to paloalto pre-requisites

Hi Team,Please provide details about the pre-requisites to migrate checkpoint to paloalto.

Hi everyone, How to PAM Self-hosted connect to AWS CLI?

IDIRA SIA Target validation failure

While i am using the IDIRA SIA to connect to a windows Server using ZSP policy, I am getting Certificate validation failed error. In the global Settings, i have disabled the target validation. Somehow it is still ding the target validation. Anyone else face this problem ? Can you suggest where else i can check ?

HA FW on AWS

I want to deploy two firewalls on AWS, in different availability zones. I understand from the guide that this isn't recommended, but that it is supported. I've managed to complete the deployment without any issues. However, I have some questions. Since it’s not possible to move an ENI between AZs, if there’s a failure with FW-A or AZ-A, FW-B wil...

Watch Now: Spark User Summit - Advanced IP Defense

On October 29, 2026, we had a fantastic session about one of the newer capabilities within the NGFW, Advanced IP Defense. Our speakers, Huzefa Amreliwala and Anish Sharma, take time to not only introduce us to the technology, but we get to see some actual case studies from the event. Please be sure to check out these recordings. PDFs of the ...

Issue with ChatGPT

Hello, after installation of ChatGPT client on Windows Clients users are reporting performance issues.Problems are also reported after updating the ChatGPT App.Builtin Snipping Tool (Win+Shift+S) takes about 10 seconds.Powershell takes 10 seconds to open a shell window and continues loading (blinking "|") for up to 30 minutes until any command...

PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP

Subject: PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP We have a PA-460 running PAN-OS 11.1.10-h1. Our GlobalProtect portal and gateway are both bound to ethernet1/1 on the same public IP, using TCP 443. Authentication is handled through Duo SAML. We need to expose an internal HTTPS/WCF application on TCP 443...

Palo Alto Firewall Upgrade from PAN-OS 10.2.10 to 11.2.10-h14 – Upgrade Path Confirmation and Feedback

I am planning to upgrade our Palo Alto firewalls from PAN-OS 10.2.x to 11.2.10-h14.Our environment consists of a firewall HA pair, and we do not have Panorama. Before proceeding with the upgrade, I would appreciate your feedback on the following:Has anyone experienced any issues during the upgrade from PAN-OS 10.2.x to 11.2.10-h14?Are there any ...

GlobalProtect v6.3 on Android

Hi, When attempting to download the GlobalProtect App from the Google Play Store, the default version hosted in the store is 6.3.5. This is in direct contradiction to the compatibility matrix, which suggests Android only supports up to GlobalProtect v6.Where Can I Install the GlobalProtect App? As such, upon installing the App, users encount...

CVE-2026-98432 impact on PAN-OS 11.1.13-h12 and 11.2.10-h14

Attention: Global TPM team, CVE-2026-98432 was recently published as a Linux kernel vulnerability. Could you please confirm whether PAN-OS 11.1.13-h12 and 11.2.10-h14 are affected by this vulnerability? I could not find any Palo Alto Networks Security Advisory related to this CVE. Thank you.

Idira EPM Onboarding Success Strategies eBook

Deploying Endpoint Privilege Manager (EPM) doesn't have to mean trading off security for user friction. Whether you are planning your initial deployment or looking to streamline policy management, this guide outlines the proven roadmap to enforce least privilege without disrupting day-to-day operations. What you’ll find inside: Proven Impl...

IAM Role for Secondary IP move between Palo Alto Firewalls in AWS

Hi All, We have two PA firewalls in AWS in a HA (Active / Standby) using secondary IP move. After an OS on both firewalls, secondary IPs are not moving back to FW01. Can someone please review following IAM role and confirm this will work in our scenario. Please also mention do i need following two in IAM parameters for secondary IP move?"ec2:Att...