Hi everyone, I’m troubleshooting a CIE group mapping issue on a firewall and would appreciate some advice. The setup is: PAN-OS 11.1.13-h9 Panorama-managed firewall CIE using Okta as the directory source Okta receives groups from both its own directory and MS Entra GP uses these groups in Portal Agent Config and Gateway configuration...
How do i get third party vpn logs to work with the xsiam analytics rules (https://cortex-docs.paloaltonetworks.com/analytics-alerts/alerts-by-data-source/third-party-vpns). These are vpn products for which xsiam doesn't have an in platform data model rule so I would have to create one. I need to know how to create one so that the analytics rules...
i have use case( 04198171 )and its close i want to open again
Hello Team,"We have observed that every agent upgraded to version 9.2.1.285 on Citrix devices (VDA, MCS) changes its status to "Partially Protected" after the cyserver restart.As the number of devices falling into this status has been increasing, we have temporarily modified the policy to prevent further upgrades on these systems until the issue...
Good day All , I am currently unable to access the GUI of a Panorama , after further investigation I have found the below(show system software status) : Process dlsrvr stopped (pid: -1) - Exit Code: 1 Process websrvr stopped (pid: -1) - Exit Code: 1 I followed on to checking the disk-space and found root at 100% : P...
Bonjour je voudrais savoir si avec la console cortex paloalto je peux faire une analyse d'un pc? En vous remerciant par avance. et si cela n'est pas possible comment je peux le faire si vous avez une procedure je suis preneuse . Merci a vous belle journée
Hello Team, As the title suggests, the GP mobile app versions differ between the Android Play Store and the iOS App Store. Is there a reason for this? Play Store App Store Thank you, Best Regards.
We are experiencing an issue with SSL decryption on a PA-520 running PAN-OS 12.1.7-h3. After enabling decryption, the firewall operates normally for approximately three hours. However, over time, the number of decryption failures gradually increases until all new connections are rejected. Disabling decryption immediately restores normal operatio...
I have noticed that PA NGFW sees this threat trojan/Win32.deceiver.d using Logon.exe from PCs in a specific zone (zone 1) going to our DCs that happen to be in a different zone (zone 2). I have had a couple of users say they have to type in their credentials a couple of times but we blamed DUO for that. In the Threat log I see only a few of th...
Hi, Is anyone using the built in playbook to remote isolate ms defender for endpoints? I want to get your thoughts on the built in playbook - does it work out the box or customization needed? thanks
Hi, Could anyone please share the CCATS documents and SC037 of HK import documents for PA-440? Since we need to export from HK to TW and need those for license application.
Hello, I am having an issue setting up user-id when the firewall is in FIPS-CC mode. Here is the following issue: Environment: PA-3440, PAN-OS 11.2.10-h7, FIPS-CC mode enabled Windows User-ID Agent v11.0.3-134 (identical version on both hosts) Issue:I have two Windows-based User-ID Agents configured under Device > Data Redistribution &g...
Looking for help to stop global protect from disconnecting so frequently, and needing to restart computer everytime to reconnect.
We have a NGFW hosted by Rackspace in the US. Any new attempt to connect to the Global Protect gateway portal fails. We can ping and tracert to the I.P. address and domain of the gateway, but whenever we go to connect via the Global Protect VPN client or we attempt to go to the web portal via browser the connection fails with an EMPTY_RESPONSE. ...
We are using Palo Alto Cloud NGFW for Azure and need to verify the OS/software upgrade details for our deployed firewalls. Could you please let us know: How to check the current PAN-OS/software version running on Cloud NGFW? Where can we find the OS upgrade start time and end time for previous upgrades? Are upgrade logs available in Azure Porta...
