Hello, Recently, I’ve been noticing quite a few false positive alerts related to the use of Claude AI. I’m investigating these alerts and trying to understand exactly what Claude is doing on the endpoint. I would like to review the command history and the actions performed by the application, but I cannot find enough information directly in the ...
Hi Everyone, I'm currently designing SD-WAN policies for our Palo Alto environment and would appreciate hearing about real-world best practices and deployment experience. I'm trying to determine which applications and traffic types should be assigned to Best Available Path versus Weighted Session Distribution. My current thinking is: Best Avail...
hello experts, the default PB provide few web customization, is it possible to modify the contents in the portal by modify the html? thanks, sdg Prisma Browser
In the PA documentation, it says Zone protection is applicable to new connections that does not have any existing session. To mitigate flood protection that will works definitely. However under Zone protection profile we have packet based attack protection which deals packet based attacks which uses certain option in layer3 and 4 of a packet. ...
Using CLI on Palo Alto by serial in for connection to ensure firewall is allowing access for panorama.
dataset = okta_sso_raw| filter (debugContext contains "New Geo-Location=POSITIVE" and debugContext contains "New Device=POSITIVE") and (eventType in("user.mfa.factor.activate", "user.lifecycle.create", "system.import.user.create"))| alter user_id = if(eventType = "user.lifecycle.create" or eventType = "system.import.user.create", json_extract_sc...
Hi team, I would like to inquire about formal information and guidance regarding the post-quantum cryptography (PQC) strategy within the Cortex XDR ecosystem. What developments, features, or updates planned on the Cortex roadmap could you share with us? Is there currently any functionality, pilot, or integration in the console or agents that add...
After patching our panorama to 11.2.15 our API Users can only do commits. commit all (push) is denied with 403.Nothing had been changed with the api keys, or the permissions regarding webui / xml apiAny idea?
Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface? I tested and it seems I only need Panorama to allow FW IP. But from the article below for MGMT interface profile it mentions adding Panorama IP is required. https://live.paloaltonetworks.com/t5/general-articles/why-it-s-essential-to-secure-your-m...
Dear all, We have face an issue recently with our Palo Alto HA pair. When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all. The only recent change we have implemented was the CIS Device H...
Hi Team, We are an MSSP and have received a request to support eDLP. Since we do not have access to these devices/services in our environment, we primarily rely on the available documentation to understand and support them. I have a few questions regarding how Strata Logging Service (SLS) works. We currently support Prisma Access using SLS. Wh...
Hello Community, We have identified several cases where the associated issues are showing dates from August. Has anyone encountered similar behavior? Could you please share your insights on the possible cause of this scenario.
Attention: Global TPM TeamHello Team, Could you answer my question? The new Windows 11 feature update,“Windows 11 2026 Update” (version 26H2), has been released to the public.Could you please let me know the compatibility status of the GlobalProtect agent?
Hi all, I have a new PA-440, I've registered it and applied all the licensing. I've been updating the software on it but noticed there is no 12.1 base to go to so I'm not able to install 12.1.7-h3. Is there a reason for this, or something I'm missing? I'm currently on 11.2.10-h14. Base releases is checked on the bottom, and I've done a check now...
