Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface? I tested and it seems I only need Panorama to allow FW IP. But from the article below for MGMT interface profile it mentions adding Panorama IP is required. https://live.paloaltonetworks.com/t5/general-articles/why-it-s-essential-to-secure-your-m...
Dear all, We have face an issue recently with our Palo Alto HA pair. When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all. The only recent change we have implemented was the CIS Device H...
Attention: Global TPM TeamHello Team, Could you help clarify the expected behavior of VM-Series license renewal and license expiration date display? Environment:- Product: VM-Series- PAN-OS: 11.1 Example: Current license:- Date Issued: Nov 14, 2025- Date Expires: Nov 14, 2026 Renewal license:- Contract period: Nov 15, 2026 - Nov 14, 2027 Our u...
Hi Team, We are an MSSP and have received a request to support eDLP. Since we do not have access to these devices/services in our environment, we primarily rely on the available documentation to understand and support them. I have a few questions regarding how Strata Logging Service (SLS) works. We currently support Prisma Access using SLS. Wh...
Hello Community, We have identified several cases where the associated issues are showing dates from August. Has anyone encountered similar behavior? Could you please share your insights on the possible cause of this scenario.
Attention: Global TPM TeamHello Team, Could you answer my question? The new Windows 11 feature update,“Windows 11 2026 Update” (version 26H2), has been released to the public.Could you please let me know the compatibility status of the GlobalProtect agent?
Hi all, I have a new PA-440, I've registered it and applied all the licensing. I've been updating the software on it but noticed there is no 12.1 base to go to so I'm not able to install 12.1.7-h3. Is there a reason for this, or something I'm missing? I'm currently on 11.2.10-h14. Base releases is checked on the bottom, and I've done a check now...
Hi today i was about to Setup Golang on my Maschine but Cortex blocket the Golang Linter as for reason "Suspicious executable detected" from github.com/golangci/golangci-lint/v2/cmd/[email protected] one tell me way that is
Hello everyone, Let me say I am new to the live community, I am trying to figure out if possible to Block file downloads using the "File download" security profile. I enabled it added it to my in to out policy and it still downloaded the files. After doing some more research I found out that the "Allow HTTP partial response" is enable it w...
I got intermitent connection affecting production PA-5220 VERSION 11.1.13 . Global protect 6.2.8-1045 troubleshooting : The VPN tunnel temporarily disconnected and routing entries associated with the tunnel were removed. The GlobalProtect client subsequently recreated and reconfigured the virtual adapter. A new IP address assignment was re...
I am trying to deploy a Palo Alto VM-Series firewall and manage it with Strata Cloud Manager (SCM). The challenge is that I only have a single internet-connected port available in my cloud environment, while the management interface has no internet access. Ideally, I would like to keep the management interface private so that I can manage the fi...
Is anyone else seeing "Failed Connections" fire on iphlpsvc after [an agent/content update / IPv6 GPO change]? Did a specific content version introduce it? What's the recommended tuning approach here — an alert exclusion/exception scoped to iphlpsvc, or addressing the underlying network/IPv6 config so the failures stop?
I am facing an issue during the upgrade Panorama-VM (PANOS 11.1.4-h7) to PANOS 12.1.7, After uploaded PANOS version 11.2.10 base version able to upgrade successfully to PANOS 11.2.10-h13. After that when try to upgrade to PANOS 12.1.7 and uploaded images it gives an error "Failed to load image into software manager" If anyone faced this issue...
In Japan, the maintenance support SKUs for the PAN-PWR-450W-AC (spare 450W power supply for PA-3400, PA-1400, ION 5200, and ION 9200) and the PAN-SFP-PLUS-SR (SFP+ form factor, SR 10Gb optical transceiver, 300m short reach, OM3 MMF, duplex LC, IEEE 802.3ae 10GBASE-SR compliant) are ZAPA-PWR-450W-AC-BS1 and ZAPA-SFP-P-SR-BS1, respectively.However...
