This blog was written by Almas Raza As organizations strengthen account security with multifac...
FY26 is officially in the books! Our fiscal year wrapped up, and it was a big year for the Fuel U...
Go beyond rigid playbooks with the Cortex AgentiX Case Investigation Agent. Discover how context-awa...
Redefine Your Network Security with the Next Evolution of Prevention The cyber threat landscape...
Episode Transcript: John: Hello PANCasters and welcome back. Today we have Daniel back with u...
Remote Browser Isolation (RBI) is now officially available for FedRAMP Moderate, providing federal a...
The new Prisma SD-WAN Enterprise Agreement (EA) consolidates your entire estate under unified auth c...
Traditional signature updates can leave a window of vulnerability that attackers actively exploit us...
Panorama + Strata Cloud Manager: Your Network Security Management, Evolved The Reality for Panor...
New URL Filtering Category: Browser-Runtime-Attack We intend to introduce a new category calle...
To better support the diverse and evolving nature of GenAI applications across websites, Palo Alto N...
To ensure a seamless transition for our customers, we have decided to delay the activation of the Co...
New URL Filtering Category: File-Converter We intend to introduce a new category called “File-C...
Ever wondered what all those mysterious parts inside your computer actually do? This blog is for you...
Learn at your own pace with free access to Fuel's Virtual Test Lab (VTL).
The Model Context Protocol (MCP), developed by Anthropic, provides a standardized approach to integr...
We would love to hear from you. Your feedback helps us improve the Fuel community!
Episode Transcript: John: Hello PANCasters and welcome back. Today we have Daniel back with u...
Panorama + Strata Cloud Manager: Your Network Security Management, Evolved The Reality for Panor...
Check out this Nominated Discussion by @JeanPaul222 (JeanPaul Mansour, Systems Engineer at Cresta...
Learn how the Palo Alto Networks Advanced DNS Security Resolver (ADNSR) now intercepts and rewrites ...
Cloud NGFW for Azure now offers Standard and Premium SKUs to support different deployment sizes a...
🚀 Secure the Cloud. Advance Your Career. As cloud architecture evolves, so does the thre...
Looking to move beyond standard IP-based policies and enforce granular security across your SD-WA...
Episode Transcript: John: Hello and welcome back to PANCast™ Today we're exploring a critical...
Remote Browser Isolation (RBI) is now officially available for FedRAMP Moderate, providing federal a...
This blog was written by Almas Raza As organizations strengthen account security with multifac...
The new Prisma SD-WAN Enterprise Agreement (EA) consolidates your entire estate under unified auth c...
Traditional signature updates can leave a window of vulnerability that attackers actively exploit us...
FY26 is officially in the books! Our fiscal year wrapped up, and it was a big year for the Fuel U...
When the controller controlling your entire network fabric goes down, does traffic stop? In the late...
PAN-OS 12.2 Ceres introduces 55+ innovations across AI-powered threat prevention, autonomous operati...
ADEM is expanding its Real User Monitoring (RUM) capabilities with the new Page Load Waterfall View....
Hello everyone, I have an active Precision AI Network Security Subscription Renewal Bundle for a firewall. However, when I log in to the Customer Support Portal and navigate to Products > Assets, then select the firewall, I do not see a Device Security license listed. I found the following document, which mentions Device Security: https://d...
I am on Global Protect Version 6.3.3-1121. I can connect on my Windows Device just fine. On a Mac version 26.6.2 when i try to connect, the client says "you are redirected to an embedded browser to authenticate and connect". It just stays there and never connects
I’ve got an iPad that has the GlobalProtect client installed. I’ve created self-signed certs using the PA 440 as the CA for the client auth, to enable MFA (user+pass & cert). I get this error “A valid client certificate is required for authentication. If the issue persists, contact your system administrator”. I’ve been troubleshooting ...
Hello everyone, We're experiencing an issue with GlobalProtect on managed iPads and iPhones version 6.3.4-23. I'm trying to determine whether anyone else has run into this recently. Environment GlobalProtect VPN deployed via Microsoft Intune iPadOS devices Authentication through PingID (SAML) VPN type: Palo Alto Networks GlobalProtect Authent...
I have a question. When we perform a Dump Alert and get the ZIP file, how can we analyze it in more detail? For example, if I want to see the .ps1 file that a particular user executed on the machine and that triggered the alert, would that file be included in the dump? I’ve already searched everywhere, but I can’t find it. I can see a folder cal...
Hello, was trying to find if anyone has ever dealt with something similar, but couldn't find anything (so, hopefully this isn't a duplicate post). Some info to put things into perspective: I was tasked to migrate 6 HA (active-passive) clusters from soon-to-be-decommissioned Panorama (hosted in Azure) to our on-prem Panorama (hosted in DC) ...
Hi guys, while working on setting up user-id, I got this 'Error: Domain's DNS name is missing in Active Directory Authentication' while trying to commit. I found this instruction: Using the Web GUI:1. Navigate to Device ➔ User Identification ➔ User Mapping.2. Click the Gear Icon next to Palo Alto Networks User-ID Agent Setup.3. Click on the Ser...
We have integrated Cortex XDR with Elastic SIEM. Our SOC process currently creates a ticket for every Cortex XDR incident/case, including Low, Medium, and High severity incidents. Is Palo Alto's recommended best practice to create tickets for all Low severity incidents, or should Low severity alerts/incidents be monitored and correlated before t...
Hello everyone, We are currently considering to us a HTTP Log Collector. However, before this can be started, I wanted to test the collection. Now, in theory, this should not be hard, due to the examples provided after setting up the integration. Nonetheless, either the Python Example is faulty in some way, or I am being exceedingly stupi...
Hi everyone, on Cortex XDR 4 ,we can build small playbooks, and one of the available actions is AD Query.My question is: what is required to configure this integration? I see that the integration asks for the IP address, domain user, and other parameters, but if the Active Directory is on-premises, how does Cortex XDR establish the connection?Wh...
How do i measure the effectiveness of your SOC’s alert triage and prioritization process?
Episode Transcript: John: Hello PANCasters and welcome back. Today we have Daniel back with us to talk about some administrative processes on the Customer Support Portal. Welcome Daniel. Can you tell us what we will be going through today? Daniel: Hi John, today we are going to talk about How to Create a Support Portal User account, How to...
Hi everyone, I recently set up GP user-id mapping in our network. It's showing domain.local\username in the logs. I was also told to set up User-ID mapping using the windows agent as well since our users would need to disconnect from GP occasionally. The logs that we get from the windows agent is domain\username. Issue now is that when we se...
Hi everyone, I've started setting up the Strata logging service and I've added in the necessary app-ids. After adding the app-ids and with destination any, it started sending out the logs to Strata without any issues. We currently have an issue when we try to add in the FQDNs either as an address group or url category that the firewall just w...
This is a follow-up to a previously solved thread: Cortex XDR cyjagent.dll injection causes JVM startup crash, where @susekar confirmed the known JDP/JVM conflict (CPATR-38467 / CPATR-18158). Thanks for that confirmation. Since the solution there is already accepted, raising this as a separate topic: we've now observed a second symptom from the ...
