This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

5th Gen Hardware | ARE | PANOS 12.1

Just throwing this out there for everyone. Sounds like the 5th gen hardware x5xx HAS to run Advanced Routing Engine (ARE.) Palo has fully redesigned the routing functionality and gotten rid of the "virtual router" for the new "logical router" in ARE. This should be a huge consideration for admins as you look to migrate from 3rd gen (ie 5200s)...

Help registering a PA-440 bought online in the US

Help registering a PA-440 bought online in the US for use in Oman Hi everyone, I bought a PA-440 firewall online from a seller in the United States. The unit is now in Oman, where I plan to use it at SpiritHub Roastery. It’s still unregistered, and I’m trying to register it under our company’s Customer Support Portal account. I’ve contacted Palo...

info by • L0 Member
  • 54 Views
  • 2 replies
  • 0 Likes

PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP

Subject: PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP We have a PA-460 running PAN-OS 11.1.10-h1. Our GlobalProtect portal and gateway are both bound to ethernet1/1 on the same public IP, using TCP 443. Authentication is handled through Duo SAML. We need to expose an internal HTTPS/WCF application on TCP 443...

mikeb by • L0 Member
  • 86 Views
  • 0 replies
  • 0 Likes

Unable to Create a New Support Case – Portal Access Issue

Hi Team, I am encountering the error message shown in the attached screenshot when trying to create a new support case. After logging into the portal, when I attempt to create a case for one of my customers, I receive the attached error message. Could you please look into this issue and help me resolve it? Please let me know if you need any addi...

Trying the DNSProxy feature for Static Response

Hie, Situation - Wanted to kaminsky the DNS Responses for my client from the FWComplication - None of the dig are responded Need your help on this? Client Requests for Promise/Spoofed IP keviv@keviv-VMware-Virtual-Platform:~$ ifconfig ens37ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500inet 192.168.21.21 netmask 255.255.255.0 ...

ocpfn4 by • L0 Member
  • 633 Views
  • 1 replies
  • 0 Likes

Resolved! Panorama SD-WAN Plugin Compatibility

Hello All! Seeking clarification on whether or not I need to upgrade my Panorama SD-WAN plugin. Currently, I am running PAN-OS 10.2.x and using SD-WAN plugin version 3.0.3. In the compatibility matrix the maximum PAN-OS version listed for this plugin version is "Latest". Does this refer to the latest version based on the minimal PAN-OS versio...

nohash4u by • L3 Networker
  • 337 Views
  • 2 replies
  • 0 Likes

How to disable Telemetry?

How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...

2026-10-13_095412.png

About CVE-2026-91403

We are currently verifying whether we are affected by the Java-related vulnerability (CVE-2026-91403). 1. After reviewing Palo Alto’s security advisory,we were unable to confirm the existence of the Java-related vulnerability (CVE-2026-91403). Does this mean it has not yet been disclosed, or that we are not affected? 2. I checked the manufactu...

n-tomo by • L2 Linker
  • 271 Views
  • 1 replies
  • 0 Likes

SSL Decryption Causing Issues with Office 365

Currently working on a deployment with a few test users utilizing SSL decryption before it's rolled out to a wider user base. Decryption is working for the most part with the required exceptions in place, but having some issues with O365 apps no longer working after it was implemented. I had created an EDL and also explicitly added some Micros...

DJ_1924 by • L2 Linker
  • 261 Views
  • 4 replies
  • 0 Likes

[SOLVED] Prisma Access - Some Websites Are Unaccesible When Connects Only to Colombia Central Gateway

Hello, LiveCommunity team! I'm writing to share my experience regarding a web access error that occurs when our mobile users are connected to our "Colombia Central Gateway," which is deployed via SCM. When users connect to the "Colombia Central Gateway" and attempt to access the following websites: bancodeoccidente.com.cobancodebogota.com/person...

DanielSRomero_1-1793126043378.png

DecryptSSL Inboundwith SSL app no

I have just configured SSL Inbound for two servers and I'm seeing some unusual behavior. I can see random connections where the SSL "decrypted" flag is set to "NO" for SSL application. However, when the application is web browsing, it is always set to "YES".

Decrypt.jpg
BigPalo by • L4 Transporter
  • 243 Views
  • 2 replies
  • 0 Likes

Github EDLs missing IPs?

Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...

Resolved! CSP Customer Support Portal Down for Maintenance – 23 October 2026

Hello Community, We are unable to access the Palo Alto Networks Customer Support Portal: https://supportcases.paloaltonetworks.com/ The portal displays the following message: “This website is down for maintenance. Sorry for the inconvenience. We'll be back shortly.” We observed this issue on 23 October 2026 at approximately 10:44 AM IST. Could a...

PA1420 HA Mode stucks in Initial (HA Initializing) mode for too long

HI All, We have an Active Passive PA-1420 which is connected together via H1-A and H1-B together. But when we restart the nodes or either of the nodes, the Passive PA stucks in Initial (HA Initializing) mode for too long. The last time i checked We restarted the devices at 12:25:00 and I last time checked 1:00:00 it was still in the same m...

  • 24479 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks