I've inherited a setup which has PAs with two vsys each connecting:external switch/router > PA external vsys > A10 Load Balancers > PA internal vsys > Cisco Nexus Leaf switches We run a full mesh setup (1x interface from each side of the PA HA pair to each (upstream switch, external A10, internal A10) internal device, both primary an...
Please, I'm very new to the field of networking but I need help. How can you manage your wifi network. By allowing a certain set of people to have access and blocked the rest. Even if they all have access to the WiFi password?. I really do need help on it. We're all on the same network but needs to block some set of people and let some set of...
Hello Team, i cannot block website torrent like cpasbien, torrent9. even i use url filtering. My license is okay
We're migrating from playbook task enrichment per incident to auto-extraction leveraging the TIM. One such example is a playbook !extractIndicators text=${incident.sourceip} auto-extract=inline Alternatively, I've also tried configuring the incident type to extract IP-recognized indicators automatically on Source IP field. Both options work fi...
We're working on integrating Cortex XDR login with our system and would like to test the access management/SSO integration before rolling it out further. Could you let us know: Whether a trial version of Cortex XDR is available that we could use for integration testing, and If not, what alternative options exist for testing the access managemen...
Hi All Active User-ID information is synchronized between Prisma Access and Panorama, including the redistribution process in both directions while Prisma (SCM) and On prem Panorama is in different? How we can achieve this in teem of user-ID redistribute. Thank you
Hi everyone, we recently deployed Terminal Server Agents on our AVD Hosts. We're having issues with about 3-5 users that use CCH Engagement. Users would get the below errors when trying to open binders: We also increased the minimum port allocation size from 200 to 500 and changed the source port allocation range to 25000–45000. From our obs...
Hey Team, Please be aware that our Product Team has been notified of HIP related issues within the recently released versions of 6.2.8-h12 [6.2.8-c1032] and 6.3.3-h13 [6.3.3-c1105]. Please refer to the following document that discusses how to verify if you match the criteria to be impacted by this and the necessary steps to resolve this if so:...
Looking to see if anyone has done the above configuration. Essentially 2 sets of firewalls, 2 locations, managed in Panorama. I created the portal on 1 set, using a self-signed certificate on the firewall (used the PA-VM as the CA and then issued itself a certificate). Created 1 gateway on the local VM, then planned to issue the remote VM a c...
why some endpoint fully protected,but this endpoint partially protected? It is new endpoint about install one~two weeks Cortex XDR Endpoint Protection
Dear community! We are currently experiencing an issue where after authenticating to the globalprotect portal page with the browser, we get the following message :"“Your login session has expired and you have been logged out for security reasons...” And we cannot get to the portal page. It only works with Mozilla firefox or Edge in IE compa...
We notice SLS subscription on my PA440 but we did not purchase a separate SLS sub. We only have Coresec Bndl with Premium support. Upon Checking my CSP there is no SLS license. Do anyone experience the same thing? Thank you.
Hi all, I'm running into a persistent annoyance with the GlobalProtect Linux client. Environment:- GlobalProtect version: 6.2.9-407- OS: Ubuntu (kernel 6.17.0-35-generic, 24.04-based)- Architecture: x86_64 Issue:Every time the GlobalProtect client starts, it creates a folder named `GP_HTML` directly in my home directory (`~/GP_HTML`). This happe...
Hi everyone, With the industry moving toward shorter validity periods for publicly issued SSL/TLS certificates, I'm trying to plan ahead for certificate management on our Palo Alto firewalls. We have several firewalls that are managed through Panorama, and some of them will also be using SAML for authentication. Since public certificates will ne...
Looking for sizing advice from anyone running PAN at a university/campus internet edge. Environment: University with 4,000–5,000 students plus staff/faculty Current internet bandwidth: 3 Gbps — expect this to grow substantially over the appliance's life (bandwidth per student keeps climbing; wouldn't be surprised to hit 8–10 Gbps by end of life...
