CVE-2024-3393 - Panorama Patch

I have several panorama managed firewalls

I have applied the work around and want to patch them to 10.2.10 - h12.

But there is no patch for Panorama, my concern is that Panorama is supposed to be higher than the managed firewalls.

Ingest AWS GuardDuty logs

Dear community,

I'm seeking help to ingest AWS Guardduty logs into Cortex XDR.

I did check the documentation and only found the method to ingest AWS assets, Flow log via S3 and Route53 via S3. 
I don't mind the AWS guardduty logs is not normalized,

XQL: How to find events from multiple host

Hi,

We need an XQL query that can identify events from multiple host that we define in the query.

Thank you.

PA VM in AWS reboot itself

Hi,
Out of sudden during night time out of Production hours, our VM in AWS reboot itself.

With error 
> 2024-12-08 19:58:29 Message [hostname_of_FW] kernel: [ 0.000000] Linux version 4.18.0-240.1.1.20.pan.x86_64 [log]
SYSTEM REBOOT [Unkown reboot at Sun

GP fails on iOS, connects on Android, Mac and Windows...

We're migrating to a new PKI, the Issuing servers are signed by the root and all (3) certificates (Root, Issuing 1 & Issuing 2) are being pushed to the iOS devices via Workspace One. The config is more or less identical to the original PKI (the old P

Palo Alto Firewall in Azure backup

Got some PA-VM-FLEX in GCP and Azure.

I could create a backup routine for the GCP ones, but, I can't complete a backup for the Azure one.

Found some old topics saying it is not possible to backup VM PA in Azure with Azure backup.

Is that true?

So, if

Websites stopped working after update

Hello,

We have updated 10.2.6-h3 to 10.2.8-h3 earlier and recently to 10.2.10-h9 but in both times we had to do rollback to 10.2.6-h3 because our websites stopped working.

Everything else seemed to work except inbound traffic to these applications.

11.1.4h7 and 11.1.5 h1 high cpu

Hi

Ugraded 11.1.4h1 to 11.1.4h7 On PA440 and PA415,  causing high both planes cpu.

rolled back to 11.1.4h1 fixed 

Upgraded to 11.1.5h1 - same issue.

Rolled back to 11.1.4h1.

Inbound TLS/SMTP inspection (to FortiMail)

Hi,

I'm wondering if anyone happens to be doing successful inbound inspection of SMTP/TLS to a FortiMail appliance? Or any other mail server for that matter.  I've run in to a brick wall when it comes to renegotiation. The Palo is serving the correct

Integration PA proxy with SIEM Qradar

Dear PA team,

We study the requirement of integration PA proxy with Qradar.

Can you share the good practice plus with URLS/doc support to configuration on both PA proxy and Qradar site?

Thanks for update and supporting.

Integration PA Proxy with Qradar

Dear PA team,

We study the requirement to integrate with SIEM Qradar.

Could you share the URL/ docs support to configure on PA Proxy and Qraar site?

 Thanks,

Mulit-Vsys setup with Wildfire

Hi Friends,

We are planning for a multi-vsys PA setup, where one vsys will have only L3/L4 policies and second vsys will be in L2 bridge mode with Threat prevention features only.

Vsys1 will only scan L3/L3 policies while vsys2 will scan traffic fo