Hi, Following the recent Microsoft updates KB5124008 and KB5126052, we have observed a significant issue with GlobalProtect’s operation, manifested by the transmission of empty or invalid HIPs. PANOS version 10.2.16-h6 (but also on 11.2.10-h13—I was in the middle of the update but rolled back to limit its impact). GP client version—primarily 6.3...
I had a PAN-DB license for URL Filtering. After renewing the licenses, there is Advanced URL Filtering instead. But it is not functioning. When I try to add a profile, there is a note at the bottom that says License required for URL Filtering to function. I deleted old keys from the CLI. When I fetch the license, it appears again. Could you plea...
We do not see the pdf format getting listed under file type in predefined patterns. Below is the ref. screenshot, What are the expectation by selecting the file type "Any"? It seems that only HTML and Microsoft office documents are supported under this category. We have observed that the PDF files are not getting blocked having the same c...
Hello , I am using a Palo Alto PA-5220 running software version 10.2.11-h12, and I am currently experiencing an issue with Commit Failed and Dynamic Updates. For the Antivirus/Threats dynamic updates, I have configured the schedule to Download, and the download completes successfully. However, the update is not being installed automatically. Cou...
Hi, Anyone experienced "connection has timed out" when accessing private application (https) using android phone? It works fine on iOS and windows. Certificate was already uploaded via Browser Security rule. Tried also the same mobile device, connected to GlobalProtect and used different browser, private app is accessible.
Hello - can anyone point me to the steps to send email notifications for when SDWAN devices and sites generate alerts? We have hunted all over Strata Cloud Manager, and have successfully sent test emails via the "Incidents" configuration area, but we cannot figure out how to tie the SDWAN ION devices and SDWAN sites (both branch and data cen...
Hi All, can advise when GlobalProtect App build 6.3.5.1-30 is expected to be available on the Google Play Store for Android devices? thank you
Hi everyone, Our staff occasionally goes abroad and they still need to be able to work. At the moment, we need to ask them to check their Public IP and then we whitelist that. This gets a bit cumbersome, especially if they're going to 3-4 countries in 2 weeks. Is there a way to allow them to connect to GP if it identifies that it's a particula...
Hello, Is there a way to automate tasks in Palo Alto PANORAMA? For example, I want to create a script that allows me to add a “bulk list of objects”—including both IP addresses and domains—and then add them to an existing group. The goal is to automate the blocking of security bulletins that arrive in our email inboxes every day. Doing this manu...
Hi everyone, I’m troubleshooting a CIE group mapping issue on a firewall and would appreciate some advice. The setup is: PAN-OS 11.1.13-h9 Panorama-managed firewall CIE using Okta as the directory source Okta receives groups from both its own directory and MS Entra GP uses these groups in Portal Agent Config and Gateway configuration...
How do i get third party vpn logs to work with the xsiam analytics rules (https://cortex-docs.paloaltonetworks.com/analytics-alerts/alerts-by-data-source/third-party-vpns). These are vpn products for which xsiam doesn't have an in platform data model rule so I would have to create one. I need to know how to create one so that the analytics rules...
i have use case( 04198171 )and its close i want to open again
Hello Team,"We have observed that every agent upgraded to version 9.2.1.285 on Citrix devices (VDA, MCS) changes its status to "Partially Protected" after the cyserver restart.As the number of devices falling into this status has been increasing, we have temporarily modified the policy to prevent further upgrades on these systems until the issue...
Good day All , I am currently unable to access the GUI of a Panorama , after further investigation I have found the below(show system software status) : Process dlsrvr stopped (pid: -1) - Exit Code: 1 Process websrvr stopped (pid: -1) - Exit Code: 1 I followed on to checking the disk-space and found root at 100% : P...
Bonjour je voudrais savoir si avec la console cortex paloalto je peux faire une analyse d'un pc? En vous remerciant par avance. et si cela n'est pas possible comment je peux le faire si vous avez une procedure je suis preneuse . Merci a vous belle journée
