LoV/ Sanitation Plan

Hi. Is there an official LoV or Sanitiation protocol for the PA-445's?

Issue with ChatGPT

Hello, after installation of ChatGPT client on Windows Clients users are reporting performance issues.Problems are also reported after updating the ChatGPT App.Builtin Snipping Tool (Win+Shift+S) takes about 10 seconds.Powershell takes 10 seconds to open a shell window and continues loading (blinking "|") for up to 30 minutes until any command...

Hi everyone, How to PAM Self-hosted connect to AWS CLI?

IDIRA SIA Target validation failure

While i am using the IDIRA SIA to connect to a windows Server using ZSP policy, I am getting Certificate validation failed error. In the global Settings, i have disabled the target validation. Somehow it is still ding the target validation. Anyone else face this problem ? Can you suggest where else i can check ?

PA-505 ZTP Onboarding to SCM, Can I move back to trad MGMT Port

Hi everyone, I deployed a PA-505 via ZTP to SCM; it worked great, and I moved it to the required folder. This is a remote simplified deployment for the customer. I am now looking to deploy more this way, some with HA I have seen issues with the passive fire via the ZTP port. So want to avoid hiccups and also if we can easiely go back to the...

Strata Cloud Management

Hi Team, We have recently migrated all of our firewalls to Strata Cloud Manager and are currently working through the identified incidents and recommended posture improvements. During this process, we have encountered an issue where certain features and configuration settings are not visible within Strata Cloud Manager, despite being available...

5th Gen Hardware | ARE | PANOS 12.1

Just throwing this out there for everyone. Sounds like the 5th gen hardware x5xx HAS to run Advanced Routing Engine (ARE.) Palo has fully redesigned the routing functionality and gotten rid of the "virtual router" for the new "logical router" in ARE. This should be a huge consideration for admins as you look to migrate from 3rd gen (ie 5200s)...

IAM Role for Secondary IP move between Palo Alto Firewalls in AWS

Hi All, We have two PA firewalls in AWS in a HA (Active / Standby) using secondary IP move. After an OS on both firewalls, secondary IPs are not moving back to FW01. Can someone please review following IAM role and confirm this will work in our scenario. Please also mention do i need following two in IAM parameters for secondary IP move?"ec2:Att...

Palo Alto Firewall Upgrade from PAN-OS 10.2.10 to 11.2.10-h14 – Upgrade Path Confirmation and Feedback

I am planning to upgrade our Palo Alto firewalls from PAN-OS 10.2.x to 11.2.10-h14.Our environment consists of a firewall HA pair, and we do not have Panorama. Before proceeding with the upgrade, I would appreciate your feedback on the following:Has anyone experienced any issues during the upgrade from PAN-OS 10.2.x to 11.2.10-h14?Are there any ...

Help registering a PA-440 bought online in the US

Help registering a PA-440 bought online in the US for use in Oman Hi everyone, I bought a PA-440 firewall online from a seller in the United States. The unit is now in Oman, where I plan to use it at SpiritHub Roastery. It’s still unregistered, and I’m trying to register it under our company’s Customer Support Portal account. I’ve contacted Palo...

False positive: Generic.ml - OutlineService.exe (VanyaVPN 1.21.1)

SHA-256:273c97229210d8f7cd03dd32663be524e1cfc17b9da77a21666528de0ccef130VirusTotal report:https://www.virustotal.com/gui/file/273c97229210d8f7cd03dd32663be524e1cfc17b9da77a21666528de0ccef130Reported verdict:Palo Alto Networks - Generic.ml, in the VirusTotal analysis dated 2026-11-06, viewed on 2026-11-08 (1/69 engines).Description:This is a new ...

Repeated review requests, changing malware labels, and no explanation

I own bloxfind.com, a Roblox analytics website showing game statistics, player counts and trends. I’ve submitted numerous requests to correct its classification, and this is getting ridiculous. It was labeled Malware, then changed to Insufficient Content after review. Now the main domain is flagged as Phishing, and my Clerk-powered login subdoma...

GlobalProtect External Gateways Require IPv6

Is there a way to get around the requirement of entering an IPv6 address when adding and external gateway in the GlobalProtect Agent App Setup, without using FQDN? I think I have all IPv6 turned off elsewhere in the config but maybe i missed it somewhere that is triggering this.

Config ingestion and SDWAN

I've been getting a lot more requests to import existing standalone firewall into SCM. That's fine and dandy but I've been testing and the convert works and then the push fails because there is already config there it thinks it conflicts with. Why doesn't it override the existing like Panorama did upon ingestion? There is no good documentation f...

PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP

Subject: PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP We have a PA-460 running PAN-OS 11.1.10-h1. Our GlobalProtect portal and gateway are both bound to ethernet1/1 on the same public IP, using TCP 443. Authentication is handled through Duo SAML. We need to expose an internal HTTPS/WCF application on TCP 443...