Discussions
Check out LIVEcommunity discussions to find answers, get support, and share knowledge related to Palo Alto Networks tools and products.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Discussions
Check out LIVEcommunity discussions to find answers, get support, and share knowledge related to Palo Alto Networks tools and products.

Browse the Community

General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

24474 Posts

Custom Signatures

The Custom Signatures discussion is a resource for security professionals to discuss the creation process of custom signatures in their PAN-OS appliance.

176 Posts

VirusTotal

Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.

812 Posts

Network Security

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to all things Network Security.

5063 Posts

Cloud Delivered Security Services

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Palo Alto Networks’ Cloud Delivered Security Services.

661 Posts

Secure Access Service Edge

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Prisma Access and Prisma SD-WAN.

587 Posts

Security Operations

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Cortex XDR, XSOAR, and Xpanse discussions.

4660 Posts

Activity in Discussions

Confirmation of Panorama 10.2.13-h7 Impact and PHP Version

Attention: Global TPM team, Regarding CVE-2026-109618 / CVE-2026-109619, could you please confirm the following? 1. What PHP version is included in Panorama 10.2.13-h7? 2. Can we understand that Panorama 10.2.13-h7 is affected by this issue and that 10.2.13-h27 (or later) is the fixed release for Panorama? Best Regards,

Nimbus by • L1 Bithead
  • 56 Views
  • 2 replies
  • 0 Likes

Global Protect Intelligent Portal

Hi All, we are upgrading our users from GP client 6.0.3 to 6.3.3 to take advantage of Intelligent Portal. We currently only have one portal at our head office NGFW. Just need to confirm that Intelligent portal would work if we add more portals at our global offices, upgrade the GP clients and add the registry entries required on the client mach...

GlobalProtect iOS devices and Passkeys

We are currently on 11.1.13 HF 12 and using GlobalProtect 6.3.6 on iOS devices, Passkeys work on our SAML portal for Windows machines, but iOS devices do not connect, has anyone seen this and if so how did you fix it? The Microsoft MFA Authenticator app worked fine for iOS devices but once Passkeys were enabled, they could not connect.

What does Portkey Error Code 033 mean, and how can it be resolved for MCP Gateway access?

IssueWhy does an Active Service Gateway API Key with MCP → INVOKE permission receive HTTP 403 / Portkey Error Code 033 when invoking MCP servers provisioned to the same admin-automation workspace in Strata Cloud Manager (SCM)?Environment / BackgroundI am evaluating the PRISMA AIRS / AI Gateway MCP functionality in an SCM trial tenant.A Tumor Boa...

False Positive Submission (Generic.ml) – D2R-TPP-Demo-0.5.0-Setup.exe

Hello,I'm the developer of a fan-made mod for Diablo II: Resurrected. Palo Alto Networks detects my installer on VirusTotal as Generic.ml. I believe this is a false positive.File: D2R-TPP-Demo-0.5.0-Setup.exeSHA-256: 8d7c96528f1619aa91ceaa3cee5cf8ad9be381142771a1b75fe1fc728137004eVirusTotal: https://www.virustotal.com/gui/file/8d7c96528f1619aa91...

armoury xsoar

I am trying to access Xsoar for case surveys, right now it says I am unauthorized. please point me in right direction if this is not the place.

XDR Collector Status on Dashboard

Hi Everyone, I'm having trouble finding a way to create a widget displaying the XDR Collector status and create a custom correlation rule for a disconnected XDR Collector. I'm not able to find the correct dataset to use in the query. I used Agentic Assistant and was not able to generate the query correctly Is this feasible on Cortex XDR Pro?

SCM-managed log forwarding, no way to enable “Cloud Logging” checkbox from SCM?

Firewalls are fully managed by SCM, so we avoid any local config. I set up a Log Forwarding profile in SCM (Objects > Log Forwarding) for system logs. It pushes down fine and shows under Device > Log Settings > System on the firewall, but the “Cloud Logging” checkbox is unchecked, and I can’t find any way to enable it from SCM. So logs ...

[SOLVED] Prisma Access - Some Websites Are Unaccesible When Connects Only to Colombia Central Gateway

Hello, LiveCommunity team! I'm writing to share my experience regarding a web access error that occurs when our mobile users are connected to our "Colombia Central Gateway," which is deployed via SCM. When users connect to the "Colombia Central Gateway" and attempt to access the following websites: bancodeoccidente.com.cobancodebogota.com/person...

DanielSRomero_1-1793126043378.png

External Entra-ID users gets 'Something went wrong'

I have an external guest who gets a Microsoft error while logging into GP. The error simply states "Something went wrong please try again" In the GP logs, I see On the Entra-ID logs, nothing. I asked the user to uninstall/reinstall the GP client, but the user in overseas so I wont hear back until tomorrow. I'm running panos 11.2.16 and GP...

MSullivan271926_0-1793118978670.png

SSL Decryption Causing Issues with Office 365

Currently working on a deployment with a few test users utilizing SSL decryption before it's rolled out to a wider user base. Decryption is working for the most part with the required exceptions in place, but having some issues with O365 apps no longer working after it was implemented. I had created an EDL and also explicitly added some Micros...

DJ_1924 by • L2 Linker
  • 136 Views
  • 4 replies
  • 0 Likes

GlobalProtect v6.3 on Android

Hi, When attempting to download the GlobalProtect App from the Google Play Store, the default version hosted in the store is 6.3.5. This is in direct contradiction to the compatibility matrix, which suggests Android only supports up to GlobalProtect v6.Where Can I Install the GlobalProtect App? As such, upon installing the App, users encount...

PA-1410 on 12.1.10-h2 troubleshooting for PAN-282032

Hi, we are currently running a PA-1410 on PAN-OS 12.1.10-h2. The workaround provided to mitigate PAN-282032 says to run the following command: debug dataplane sw-asic dump flow-table info When we run the above command, we get an invalid syntax error. Does anyone know if this workaround works for a PA-1410? Known Issue - PAN-282032 Any advi...

PA-5450 Dataplane CPU Utilization Discrepancy (GUI vs SNMP)

Attention: Global TPM team, Hello, Could you please clarify the relationship between the Dataplane CPU utilization shown in the GUI and the SNMP CPU OIDs on a PA-5450? It was observed that the GUI shows approximately 80% Dataplane CPU utilization, while hrProcessorLoad.2 (1.3.6.1.2.1.25.3.3.1.2.2) returns only 5-10%. Could you please con...

Nimbus by • L1 Bithead
  • 107 Views
  • 2 replies
  • 0 Likes