PA VM in AWS reboot itself

Hi,
Out of sudden during night time out of Production hours, our VM in AWS reboot itself.

With error 
> 2024-12-08 19:58:29 Message [hostname_of_FW] kernel: [ 0.000000] Linux version 4.18.0-240.1.1.20.pan.x86_64 [log]
SYSTEM REBOOT [Unkown reboot at Sun

GP fails on iOS, connects on Android, Mac and Windows...

We're migrating to a new PKI, the Issuing servers are signed by the root and all (3) certificates (Root, Issuing 1 & Issuing 2) are being pushed to the iOS devices via Workspace One. The config is more or less identical to the original PKI (the old P

Regarding Security Advisory CVE-2024-3393

Hello Team,

   I have recently upgraded my pa-1410 firewall to panos ver. 11.1.4-h7, because its preferred version so far.

Today I have received this advisory link ...

https://securityadvisories.paloaltonetworks.com/CVE-2024-3393

I have DNS Security

Palo Alto Firewall in Azure backup

Got some PA-VM-FLEX in GCP and Azure.

I could create a backup routine for the GCP ones, but, I can't complete a backup for the Azure one.

Found some old topics saying it is not possible to backup VM PA in Azure with Azure backup.

Is that true?

So, if

Websites stopped working after update

Hello,

We have updated 10.2.6-h3 to 10.2.8-h3 earlier and recently to 10.2.10-h9 but in both times we had to do rollback to 10.2.6-h3 because our websites stopped working.

Everything else seemed to work except inbound traffic to these applications.

Happy Holidays from the LIVEcommunity!

Celebrating the Holiday Season Together

As the year draws to a close, it’s the perfect time to reflect on the moments that have brought us together and the opportunities that lie ahead. The holiday season is a time for connection, gratitude, and c

11.1.4h7 and 11.1.5 h1 high cpu

Hi

Ugraded 11.1.4h1 to 11.1.4h7 On PA440 and PA415,  causing high both planes cpu.

rolled back to 11.1.4h1 fixed 

Upgraded to 11.1.5h1 - same issue.

Rolled back to 11.1.4h1.

Inbound TLS/SMTP inspection (to FortiMail)

Hi,

I'm wondering if anyone happens to be doing successful inbound inspection of SMTP/TLS to a FortiMail appliance? Or any other mail server for that matter.  I've run in to a brick wall when it comes to renegotiation. The Palo is serving the correct

migration Nat related

I have imported a JUNOS 20.4R3 configure xml file to expedition and for NAT policy expedition automatically changes to bi-direction policy. May I know why?? I have searched JUNOS documents and I found out that if it is a bi-direction policy it goes t

Integration PA Proxy with Qradar

Dear PA team,

We study the requirement to integrate with SIEM Qradar.

Could you share the URL/ docs support to configure on PA Proxy and Qraar site?

 Thanks,

XQL: How to find events from multiple host

Hi,

We need an XQL query that can identify events from multiple host that we define in the query.

Thank you.

Mulit-Vsys setup with Wildfire

Hi Friends,

We are planning for a multi-vsys PA setup, where one vsys will have only L3/L4 policies and second vsys will be in L2 bridge mode with Threat prevention features only.

Vsys1 will only scan L3/L3 policies while vsys2 will scan traffic fo

PaloAlto Passive Firewall Monitoring in HA Setup

Hi everyone,
Greetings!

I’m currently using OpManager to monitor a Palo Alto firewall in an HA Active/Passive setup, and the Link State of the interfaces on the passive device is set to auto.
While OpManager is able to correctly pull interface details