Discussions
Check out LIVEcommunity discussions to find answers, get support, and share knowledge related to Palo Alto Networks tools and products.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Discussions
Check out LIVEcommunity discussions to find answers, get support, and share knowledge related to Palo Alto Networks tools and products.

Browse the Community

General Topics

Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

24338 Posts

Custom Signatures

The Custom Signatures discussion is a resource for security professionals to discuss the creation process of custom signatures in their PAN-OS appliance.

175 Posts

VirusTotal

Have you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.

789 Posts

Network Security

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to all things Network Security.

5857 Posts

Cloud Delivered Security Services

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Palo Alto Networks’ Cloud Delivered Security Services.

653 Posts

Secure Access Service Edge

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Prisma Access and Prisma SD-WAN.

565 Posts

Cloud Native Application Protection

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Prisma Cloud and Cloud Identity Engine discussions.

476 Posts

Security Operations

Post questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Cortex XDR, XSOAR, and Xpanse discussions.

4057 Posts

Activity in Discussions

VirusTotal Verdict Change Request for False Positive

Hello Palo Alto Networks team, I would like to request a false positive review for the following file detected by Palo Alto Networks on VirusTotal. File Hash:b278381a97cfea52a408b9aae69e5c70aad3ed6dba8489783defcb6b9dead0d2 Link to VirusTotal report:https://www.virustotal.com/gui/file/b278381a97cfea52a408b9aae69e5c70aad3ed6dba8489783defcb6b9dead0...

XSOAR community or Trial Version

Hi All, From posts/discussions year or so ago it looks like there was a XSOAR community edition or trial edition available for people who want to evaluate or learn the platform. However, I cannot find any where to download the version or any other way to build PoC environment. Is there anything out there that I can use for PoC purposes? Thanks

hamza_b by L0 Member
  • 26 Views
  • 0 replies
  • 0 Likes

Dead Space

This has been bothering me for a while. Look at all this useless space that is taken up now! 1/3 of the screen is useless. I wish I could scroll it away, but we are forced to deal with it. The information I need to actually review is even further down in the bottom 40% of the screen.

GPereira950193_0-1778519819702.png

Design active passive connected with vrrp switches

Design active passive connected with vrrp switches for physical connection and AE i want to connect full mesh topology but want to confirm it's working like stack switches. PA1 > (2 links sw1,sw2) PA2 > (2 links sw1,sw2) so for aggregation to i can assign port to the AE. thanks.

Ruckus vsz Syslog and User-ID Agent

Hello community, this topic has been on my mind as well. I already searched the forums, but unfortunately I couldn’t quite make sense of it. Which setting do I need to configure on a VSZ 7.1.1.0.872 for the syslog server? Take a look at the image, please! Or rather: will I then see these entries in the syslog that ends up on the Palo Use...

2026-05-11_08-41-10.jpg

Regarding the migration from HDD to SSD for PA-VM running in the Azure environment

Hello everyone,We are deploying and building a PA VM on Azure.During deployment, there was no option to select between HDD and SSD, so we built it on an HDD.Therefore, as a test, we stopped the virtual machine (Palo Alto) and migrated it from HDD to SSD in Azure.Afterward, we started Palo Alto and performed a differential check, and there were n...

Otsuka by L0 Member
  • 107 Views
  • 0 replies
  • 0 Likes

False Positive Dispute - DELOL Shield - an offline CLI Data Security software flagged as trojan

Hi, I am Pravin Dhayfule. I built DELOL Shield, a next-generation cryptographic platform designed to counter data theft and ransomware attackers. Instead, your platform is marking my security software as a Trojan and Ransomware tool, hampering my reputation. In spite of being a Double-signed Offline CLI for File Protection, its member executable...

pravin by L0 Member
  • 117 Views
  • 0 replies
  • 0 Likes

[SOLVED] GPUDATE /FORCE DOESN'T WORK WITH GLOBAL PROTECT

Hello LiveCommunity Team! I created this post to share my experience regarding an issue involving GlobalProtect users from Prisma Access who attempt to run gpupdate /force to update GPO policies from the DC server, and who encounter the following error:CMD ERROR GPUPDATE /FORCEC:\WINDOWS\system32>gpupdate /force Updating policy...User polic...

DanielSRomero_1-1778369596055.png
DanielSRomero_2-1778369715172.png
DanielSRomero_4-1778370034165.png

Globalprotect Client 6.2.7 disconnects multiple times

We are encountering several users, where Globalprotect disconnects the GP-tunnel on Windows 11. In PanGPS.log I found the messages: CheckPanGpAgentThread: PanGPA process #### exits, ret is 00000057. and GlobalProtect agent terminates unexpectedly. Skip StopThreads(). Has anybody a suggestion, how to get rid of this failure?

halladm by L0 Member
  • 180 Views
  • 2 replies
  • 0 Likes

XSIAM - Data Patterns

Hi. Please, a question about Data Patterns in Cortex XSIAM. Once the connection from the Broker VM to the Windows server (SMB) is configured, the connection is verified and displayed under Modules -> Data Security -> Storage Buckets, how is it linked to previously created Data Patterns and Data Profiles?. Thank you in advanced. Regards.

Global Protect count current users not match statistics

Hey thereThe counts are not matching between: >show global-protect-gateway summary detail GlobalProtect Gateway: connect-gtw:Current Users: 675Previous Users: 4520current-user : 675 Also with MIB OID .1.3.6.1.4.1.25461.2.1.2.5.1.3.0 panGPGWUtilizationActive Tunnels shows 675 But >show user ip-user-mapping all type GPTotal: 225 usersi...

kuschg by L0 Member
  • 114 Views
  • 0 replies
  • 0 Likes

Regarding the migration from HDD to SSD for PA-VM running in the Azure environment

Hello everyone, We are deploying and building a PA VM on Azure. During deployment, there was no option to select between HDD and SSD, so we built it on an HDD. Therefore, as a test, we stopped the virtual machine (Palo Alto) and migrated it from HDD to SSD in Azure. Afterward, we started Palo Alto and performed a differential check, and there we...

Otsuka by L0 Member
  • 98 Views
  • 0 replies
  • 0 Likes

PAN-308564 Known Issue

I could not help notice that all of the latest and preferred 11.1.x, 11.2.x and even 12.1.x all have the following known issue. PAN-308564 Packets are dropped on SD-WAN interfaces if they require fragmentation for an interface but have the Don't Fragment (DF) bit set. This results in unexpected packet drops. This affects client to server...

Quarantined Files not appearing in Action Center

Hi there, We are having issues with files being quarantined on BIOCs but they are not appearing in the Action Center-->File Quarantine. We have verified both Broker VM and local machines experiencing this issue are not anywhere near storage quota. We can see the quarantine appearing in the trapsd.log file and we can see the packets making...

M.Crow by L1 Bithead
  • 170 Views
  • 1 replies
  • 0 Likes