Getting an error while pushing the policy from Panorama to local PA- 3020 firewall

Hi Guys,

I'm  getting  below error while pushing the policy to local connected PA-3020 firewall. 

• Performing panorama connectivity check (attempt 1 of 1)
• . Panorama connectivity check failed for 10.120.19.106. Reason: Certificate error, reverting co

Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

Hi all,

      last time I tryed to upgrade my Panorama, I had this error: "Label sysroot1 does not indicate a valid image".

The panorama is working, also I'm able to upload images and content to managed firewall, only I cant upgrade itself.

Is not re

Best way to restrict software by digital signer

hey guys, i'm not clear how to block the running (installing) of certain software using XDR by restricting by digital signer. 

Is it possible to cerate a BIOC and apply to a restricted profile? If not, what would you say is the best way to go about th

Data Base application acees is slow through IPSEC Tunnel

While I am accessing database applications like tally through the IPsec tunnel, I am getting slowness.

1 we have good ISP speed 100Mbps

2 only 5 users are accusing this application 

3 we have overridden the SMB application 

4 no packet droop found 

h

Cortex XDR dashboard into Grafana?

Web Exception

Hi everyone,

I enabled users to access the internet with an SSL certificate on the firewall.I want to redirect a website to users who do not have an SSL Certificate installed. How can I do that?

For example, if an SSL certificate is not install

IP sec tunnel

Hi Team,

We have multiple IP-sec tunnels and want to clean up unused tunnels.

Like we have the option of an unused rule for security policy, or we will know by its hit count, is there any similar way we can find out an unused tunnel so we can delet

Latency while using client application such as MS RSAT with GP VPN

Hello All,

Does any one face latency issues while using client application such as MS RSAT or MS SCCM using GP. I'm currently running GP version 6.1.2-83

I will appreciate any help/comments to find a solution to this chronic ongoing issue

Move Cortex XDR agent from one tenant to another (and back)

When we move an agent to a new management server, what would happen to the logs and telemetries we have on the old tenant? Would they be retained as per the usual policy or would they just get purged?

Also if we then move it back to the old tenant,

How can I see if my FW has already been exploited by the CVE-2024-3400?

Hello team

How can we determine if your device logs match the known indicators of compromise (IoC) for this vulnerability?

I have already fixed the vulnerability and I have the TSF of my device and I want to see if I have been exploited before applyi

GlobalProtect and using split tunneling

Global protect has the handy feature of excluding select destinations from being sent over the vpn. For example, setting

(Split Tunnel - Domain and Application - Exclude Client Application Process Name) https://docs.paloaltonetworks.com/globalprotect/

Issues with pushing out 10.2.9-h1

There is not a community discussion for issues implementing 10.2.9-h1

We have a maintenance window to push out 10.2.9-h1 Thursday evening and with recent issues with 1.2.7.h3 and other roll outs i am starting this thread for the community.

Fast boot PA-450

I have a firewall that for some reason after doing a version update to 11.1 is only taking 2 to 3 min to boot now. I noticed all the logs were not showing up and the interfaces was showing down, but everything was working. I decided to do a factory r

SSO and MFA for Admin Access Only

For those who have implemented SSO and MFA for Administrator web access to firewalls and Panorama, what was implemented? Did you use SAML or Radius. Is Azure AD an acceptable IdP? What was used for MFA? 

Thank in Advance