We are facing an issue recently, We have 7500 series palo alto and logs send to log collector (M-700 log collector group running PAN OS 11.1.13-h8),. When check from panorama we are able to see the traffic session end reason as "Threat" but when check in the Threat section not able to sees the exact logs and the threat details as well. If an...
How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...
Hi everyone, I urgently need your help with a Cortex XDR configuration issue. We need to completely exclude specific directories from Cortex XDR activity, ensuring that the agent does not perform any scanning, analysis, injection, or other operations within those directories. Initially, we suspected that the issue was related to Exploit Pro...
Hi Community, I am encountering a status warning in the Cortex XDR Console for several endpoints and would appreciate your guidance. Status/Error Message: "Windows Security Center Integration status – Windows: Failure to register to Windows Security Center – agent works alongside Defender" Environment Details Operating System: Windows 11 Pro...
Hi All, waiting on official confirmation from PAN on this.. but has anyone to date done this? where you have a bvm in Azure and a bvm on-prem (esxi) and clustered them together? doable? i have concerns around hardware failure and the arp cache being cleared amongst other things.. thanks in adv
Hi community,We have an Azure active/passive pair running PAN-OS 10.2.2 / VM-Series plugin 3.0.2, without an active support contract.During failover, PA02 becomes active, but the floating IPs remain on PA01 and traffic fails. Azure authentication succeeds; NIC updates return HTTP 400 — MismatchingResourceName.Our findings:Firewall Azure NIC orde...
We are looking to move all devices that connect to our Prisma Access environment to move to always on VPN. We attempted to do this once and caused the clients to black hole traffic. We are looking to use our internal certificate authority and each device has its own signed certificate for authentication for pre-logon. Is there a way we can limi...
Hello Community, We are experiencing an issue with exporting Stats Dump file required for SLR report on PA-410 firewall.The option to export Stats Dump file is not available in web GUI, and the corresponding CLI command returns an "Invalid syntax" error. Environment:Firewall Model: PA-410PAN-OS Version: 11.2.13-h2 Could anyone please clarify...
I am on 11.1.13 Does the NGFW or Panorama have traps for expiring or expired certificates? (Used for mgmt access and secure communications channel) I the trap below in MIB file for 11.1 however it does not seem to be triggering when certificate expires. .1.3.6.1.4.1.25461.2.1.3.2.0.3220 panTLSCertificateExpiredTrap
We have GlobalProtect Agent 6.2.8-c317 yesterday some users could connect but could not access network files or get on the internet. Other user no problem. Nothing changed on our network other then the GP VPN license expired 2 days ago even though we paid for the renewal 3 weeks ago. I am not a Palo Alto person and since I cannot get to support...
Folks, I have a standalone hardware firewall and I'm am trying to to use what was the AIOps Essentials functionality now bundled with Strata Cloud Manager Essentials. The telemetry data is flowing from my firewall to SCM. Since installation I have performed a Commit on my firewall. In SCM Insights > NGFW > Status and Monitoring I see...
Hello, Recently, I’ve been noticing quite a few false positive alerts related to the use of Claude AI. I’m investigating these alerts and trying to understand exactly what Claude is doing on the endpoint. I would like to review the command history and the actions performed by the application, but I cannot find enough information directly in the ...
Hi Everyone, I'm currently designing SD-WAN policies for our Palo Alto environment and would appreciate hearing about real-world best practices and deployment experience. I'm trying to determine which applications and traffic types should be assigned to Best Available Path versus Weighted Session Distribution. My current thinking is: Best Avail...
hello experts, the default PB provide few web customization, is it possible to modify the contents in the portal by modify the html? thanks, sdg Prisma Browser
In the PA documentation, it says Zone protection is applicable to new connections that does not have any existing session. To mitigate flood protection that will works definitely. However under Zone protection profile we have packet based attack protection which deals packet based attacks which uses certain option in layer3 and 4 of a packet. ...
