• 519,905 Members
  • 1,203 Online
  • 1,128,419 Posts
  • 19,367 Solutions
  • 53,007 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Panorama OS 11.2 API: Support for Commit All on a Specific User?

Hey all, I am running a Panorama PAN-OS version 11.2.0 instance that managed two Firewall devices, running PAN-OS 11.1.0 and 11.2.7-hc13 I have a question about committing changes to a given template stack / device group for a specific admin account. Before I commit to the template stacks / device groups / templates, I first make an API call to ...

mattirby_0-1785769206742.png
mattirby_2-1785774099572.png
mattirby_1-1785773990089.png

Strata Cloud Manager UI language and translations

Hi team, there seems to be no (non hacky) way to set the SCM language. Even if OS and browser are set to English, the UI will force localized versions when available. This leads to a very confusing user experience: For example Policy Based Forwarding: In the SCM UI you will get the translation "Richtlinienbasierte Weiterleitung", which you'...

MSchapdick_0-1770632469124.png

Issue with GP Access for JIO Users on PA-820

Dear Friends, One of our customer is facing an issue with users on PA-820. According to the customer, many users are connecting to the internet via mobile hotspot using JIO SIM cards. While they can successfully connect to GlobalProtect, but they are unable to access internal servers.This issue is specific to users who are using JIO SIM cards ...

Having issues connecting to GlobalProtect VPN from laptop connected with iPhone and JiO ISP hotspot

Hello community, we are facing a strange issue with the globalprotect connectivity. where we are trying to connect vpn from laptop and its connected via iPhone hotspot having JiO sim card, its on 5G network. we have SAML configured to login the global protect but its not happening in above scenario. did someone face similar issue and hav...

Use onprem hosted EDL from AWS CNGFW

Is it somehow possible to load an EDL from a server located in onprem network (not reachable from Internet)? From which interface / IP address does the AWS CNGFW tries to connect to EDL server? Can it make connection from an interface / IP address located in customer VPC? Could not find any documentation for this specific topic.

Anon1 by L4 Transporter
  • 1788 Views
  • 4 replies
  • 0 Likes

CIE sync Entra Group to all DC NGFW

Hi All, Current I had 2 pair firewall sit at different location and integrated with CIE. GP always on to DC-1 without any issue by using Entra ID grouping , since authenticated at DC-1 so DC-2 doesnt contain any user ip mapping information, so the security policies with groupping don work. What I tried 1. Data redistribution - It work with ...

VLim by L2 Linker
  • 25 Views
  • 0 replies
  • 0 Likes

Premium Instance type for Cloud NGFW for Azure

1 min read

Cloud NGFW for Azure now offers Standard and Premium SKUs to support different deployment sizes and requirements. In this video, we review the differences between the two options and demonstrate how to select a SKU during firewall creation or upgrade an existing Standard firewall to Premium.

JayGolf by Community Team Member
  • 135 Views
  • 2 replies
  • 0 Likes

Best Practices for Migrating to Prisma Access?

Hi everyone, We're currently evaluating a move to Prisma Access as part of our SASE strategy and would like to learn from others who have already completed the migration. For those with production experience: What challenges did you encounter during deployment? Any best practices for a smooth migration? Are there any common mistakes that s...

kosarbnu by L1 Bithead
  • 41 Views
  • 1 replies
  • 0 Likes

Automating CSV IOC Integration into Cortex XDR

Hi,Currently, we are performing IOC integration manually by importing a CSV file directly into the Cortex XDR console. Is there a capability or best practice to automate this CSV IOC integration? We are looking for ways to automatically fetch and ingest these indicators.Any guidance on using would be greatly appreciated.Thanks in advance!

Azure Cloud NGFW

In the doco I see that Cloud NGFW for Azure can automatically scale to 40 instances and support 100Gbps in a vNet. I do not see any details for the config of autoscaling. Do I need to configure the autoscaling or does it just happen?

Globalprotect for android ver 6.1.14 issue

Hello Team, I am recently having problem with GlobalProtect agent for Android phones. previously everything was fine and no problems until version 6.1.11.x. now upgraded to Globalprotect for android version 6.1.14.x. since this version was installed o the mobiles, we are having problems connecting to the portal. as soon as yo...

IP Validation for GlobalProtect Public IP

Hi All, We are currently attempting to complete GlobalSign IP address validation for our GlobalProtect public IP address.GlobalSign's validation process requires access to a challenge file under:/.well-known/pki-validation/However, our understanding is that Palo Alto does not normally host files under this path.In addition, HTTP validation via p...

Verification of Panorama (HPV) Upgrade Procedure

Attention:Global TPM team,Environment:Existing Panorama HPV environmentCurrent version: 11.2.7-h2Target version: 12.1.4-h3 We received an inquiry from a customer regarding an upgrade from Panorama 11.2.7-h2 to 12.1.4-h3.First, we provided the base image Panorama-HPV-12.1.2.vhdx, followed by the base OS Panorama_pc-12.1.2 and the target version...

Prisma Access Agent "Cannot reach server" Error

Hi All, I recently ran into this problem and resolved it so thought I would share it here. I am currently running a POC for PAA and had installed it with no issues on a MAC, when I can to install on Windows11 I got the above error, after digging into the CLI with epm status command the issue seemed to be an SSL handshake error caused, it seems...

Upcoming Fuel Events

Top Contributors