This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Alternate of Expedition Tool

Hello Palo Alto Networks Community, I would like to introduce PAN-Tool, a web-based platform designed to simplify multi-vendor firewall migration and Palo Alto Networks configuration conversion. Many engineers currently use tools like Expedition for configuration migration and optimization. PAN-Tool is built with a similar objective — providing ...

Request the Change boot mode feature will work on GUI

Dear Palo Alto, I cannot change ZTP to Standard mode on GUI, it is not working, so i have to access to CLI to prompt "set system ztp disable" to change mode. I don't understand why Palo Alto doesn't make this feature work on the GUI even though there's a menu displayed. I think the development team should consider implementing this feature s...

Issues with connectivity between HA PAs and Nexus Leaf Switches

I've inherited a setup which has PAs with two vsys each connecting:external switch/router > PA external vsys > A10 Load Balancers > PA internal vsys > Cisco Nexus Leaf switches We run a full mesh setup (1x interface from each side of the PA HA pair to each (upstream switch, external A10, internal A10) internal device, both primary an...

URL FILTERING

Hello Team, i cannot block website torrent like cpasbien, torrent9. even i use url filtering. My license is okay

K.BAKARY by • L0 Member
  • 102 Views
  • 3 replies
  • 0 Likes

Network wifi Management

Please, I'm very new to the field of networking but I need help. How can you manage your wifi network. By allowing a certain set of people to have access and blocked the rest. Even if they all have access to the WiFi password?. I really do need help on it. We're all on the same network but needs to block some set of people and let some set of...

Terminal Server Agent issues with CCH Engagement

Hi everyone, we recently deployed Terminal Server Agents on our AVD Hosts. We're having issues with about 3-5 users that use CCH Engagement. Users would get the below errors when trying to open binders: We also increased the minimum port allocation size from 200 to 500 and changed the source port allocation range to 25000–45000. From our obs...

RPerez481389_0-1784765718878.png
RPerez481389_1-1784765772928.png

Site to site VPN between PA & Azure || Failover / HIgh availability

We have configured two Site-to-Site VPN tunnels between our Palo Alto firewall and Azure VPN Gateway to provide redundancy and high availability. However, we are encountering an issue where we are unable to keep both VPN tunnels active simultaneously: When both VPN tunnels are up, connectivity between our on-premises environment and Azure becom...

Automatic Certificate Renewal for Global Protect Portal

With the pending move of publicly issued certificates to a shorter time frame, is there anyway to ease the amount of effort to get the new certificates installed on the firewalls since it will now need to be done multiple times a year? Working on a few that will using SAML for authentication and be managed by Panorama so trying to see the best ...

DJ_1924 by • L2 Linker
  • 199 Views
  • 3 replies
  • 1 Likes

Warning: External Dynamic List XXX is configured with no certificate profile

Hi all, I've been following this Article but I've run into an issue. When I try to edit an existing EDL and assign the Certificate Profile I created, the dropdown only shows "None (Disable Cert profile)" — the new certificate profile isn't listed as an option. However, when I create a brand new EDL, the certificate profile I created is available...

MaratP by • L1 Bithead
  • 1058 Views
  • 2 replies
  • 0 Likes

PAN-OS Dark Mode

I am surprised there is not a Dark Mode. I have seen comments on using CLI and other Third Party apps to change, This can effect how the GUI is viewed. I have noticed when doing this with other apps you can miss critical info. I would say this is a feature add that needs to be made. I have issue with my eyes that the bright background makes it h...

Resolved! Wildfire Malware detected miniwallet.bundle.js as Malware, VirusTotal does not list it

Hey we are using Cortex XSIAM and have been getting alerts on miniwallet.bundle.js apparently during MS Edge updates.From what I can see the Wildfire Verdict has changed yesterday. However, reading the report, I cannot explain why it is considered Malware. Googling also did not get me any further.Most interestingly: On VirusTotal the correspon...

PAN-OS 12.1.X Firewalls & Panorama Managed

Just a heads up to the community apparently there's an issue with firewalls that are 12.1.X that are configured to be managed from Panorama. Apparently PAN-322826 exists where any hardware that's Panorama managed can spontaneously suffer a hardware reload due to a "configd" memory leak. (A 4 months long case finally got us this info.) To my k...

Resolved! EDL server certificate authentication failed. A local copy of associated external dynamic list will be used

Since Saturday 7/12/2026 I've started receiving these messages on our firewall every few minutes. eventid: tls-edl-auth-failureobject:fmt: 0id: 0module: generalseverity: criticalopaque: EDL server certificate authentication failed. A local copy of associated external dynamic list will be used, so it won't impact your policy. EDL Name: Cortex I...

  • 24413 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks