• 522,336 Members
  • 1,791 Online
  • 1,129,662 Posts
  • 19,499 Solutions
  • 53,212 Likes

Welcome to Palo Alto Networks LIVEcommunity

Find answers, share solutions, and connect with peers and thought leaders from around the world.
New to LIVEcommunity? Check out our Welcome Guide.

Community Activity

Virtual Test Lab

1 min read

VIRTUAL TEST LAB REQUESTS ARE ON HOLD UNTIL FURTHER NOTICE. Due to changes in the test lab, new requests are on hold until we get some issues resolved. The Virtual Test Lab (VTL) offers an environment where users can practice and get familiar with the Palo Alto Networks Next-Generation Firewall. The pre-built lab environment provides access to...

Masharad by L3 Networker
  • 116956 Views
  • 62 replies
  • 18 Likes

No proposal chosen ikev1

After upgrading to panos preffered version 12.1.7-h3 my ikev1 ipsec tunnel with ipsec crypto md5,3des,nopfs is not coming up , knowing that ike phase 1 is successful but ike phase 2 is giving no proposal chosen error , the algorithms matches the other peer and i tried downgrading the tunnel came up, i would appreciate any help

Copilot said: Migrating a configuration from a FortiGate firewall to a Palo Alto Networks

Copilot said: Migrating a configuration from a FortiGate firewall to a Palo Alto Networks (PAN-OS) firewall is not a direct import/export process because the two vendors use different configuration architectures. The migration typically involves exporting the FortiGate configuration, converting it, validating the objects and polici...

fadhili by L0 Member
  • 33 Views
  • 0 replies
  • 0 Likes

Tips & Tricks: How to Customize Your Response Pages

3 min read

Ever wanted to have a more dynamic or explanatory response page? The default response pages are pretty good, but sometimes you want to add that little bit extra. So how do you go about spicing up these response pages? With custom response pages, you can add your own HTML code to display your own customized page. Each virtual system can have ...

How to Customize Your Response Pages.png
kiwi_2-1638348450677.png
kiwi_4-1638351941501.png
kiwi by Community Team Member
  • 26201 Views
  • 4 replies
  • 3 Likes

TrendMicro Apex One Alert mapping into XSIAM

Hi All Has anyone done this to date and willing to share their Correlation XQL logic used to map alerts from Apex One into XSIAM? I have done this for a few others already like Crowdstrike, MS Graph API etc but having issues with time to navigate through all the raw log data to determine the required fields to validate and alert on what is requi...

PA_nts by L4 Transporter
  • 72 Views
  • 0 replies
  • 1 Likes

Cortex XDR JDP method instrumentation causing severe Java runtime slowness (agent 9.2.0.120) — follow-up to solved cyjagent crash thread

This is a follow-up to a previously solved thread: Cortex XDR cyjagent.dll injection causes JVM startup crash, where @susekar confirmed the known JDP/JVM conflict (CPATR-38467 / CPATR-18158). Thanks for that confirmation. Since the solution there is already accepted, raising this as a separate topic: we've now observed a second symptom from the ...

Resolved! Cortex XDR cyjagent.dll injection causes JVM startup crash (EXCEPTION_ACCESS_VIOLATION in ntdll.dll)

We run an enterprise Java server application (Zulu OpenJDK 11, Windows Server) and are seeing consistent JVM crashes at startup on hosts protected by Cortex XDR. The agent injects cyjagent.dll (Java Deserialization Protection module) into the Java process, and the JVM crashes in native code: # EXCEPTION_ACCESS_VIOLATION (0xc0000005) # Problem...

XSIAM logs from Palo Alto Firewall using syslog

https://cortex-docs.paloaltonetworks.com/cortex-xsiam/configure-cortex-xsiam/cortex-xsiam-data-sources/palo-alto-networks-integrations/next-generation-firewall/ingest-next-generation-firewall-logs-using-the-syslog-collector Why does the official guide only highlight Custom Formats for Traffic, Threat, URL, and File data logs? What about other NG...

PA-5200 Series Enviroment

Hi I have a question regarding the output of the 'show system environmentals' command on the PA-5200 Series. Could someone explain the difference between 'NP / NP Core' and 'CP / CP Core' in the output results? In my opinion, NP and CP are likely hardware accelerators, such as a Network Processor and a Content Processor, respectively. However,...

Browser Threat Brief: OAuth Phishing Turns a Legitimate Login Into Account Access

6 min read

This blog was written by Almas Raza As organizations strengthen account security with multifactor authentication, attackers are changing how they target users. Rather than always trying to steal passwords, they are increasingly abusing trusted OAuth authorization workflows to gain access to email, files and cloud applications. In these attacks...

tuvu01 by L3 Networker
  • 984 Views
  • 0 replies
  • 1 Likes

Fuel User Group: A Year of Growth, Connection, and Community

3 min read

FY26 is officially in the books! Our fiscal year wrapped up, and it was a big year for the Fuel User Group community. It was a year of expansion for our global community. We welcomed more members, added new user groups, and launched our free educational programming in new regions. Most importantly, we created more ways for users to participat...

Inforgraphic_final.png
Masharad by L3 Networker
  • 253 Views
  • 4 replies
  • 4 Likes

Firewall Bios update after activating a new GlobalProtect version

Ran into an oddity today, and I'm not sure if I fully believe support. I upgraded our firewall last week to 12.1.7-h3, all went fine system is running normally. Today I decided to start testing the new version of GlobalProtect (6.3.3-h11). When activating it, it asked if I wanted to do a system health report. Seemed kind of weird, would expe...

PatWruk by L1 Bithead
  • 90 Views
  • 0 replies
  • 0 Likes

Upcoming Fuel Events

Top Contributors