Hi All, can advise when GlobalProtect App build 6.3.5.1-30 is expected to be available on the Google Play Store for Android devices? thank you
We are experiencing an issue with SSL decryption on a PA-520 running PAN-OS 12.1.7-h3. After enabling decryption, the firewall operates normally for approximately three hours. However, over time, the number of decryption failures gradually increases until all new connections are rejected. Disabling decryption immediately restores normal operatio...
Most of the users are getting captcha error in google.com Wondering why PA is not blocking such requests. Will the DOS policy in PA help prevent such unlimited outbound queries? Page says our systems have detected unusual traffic from your computer network.
Hi, Following the recent Microsoft updates KB5124008 and KB5126052, we have observed a significant issue with GlobalProtect’s operation, manifested by the transmission of empty or invalid HIPs. PANOS version 10.2.16-h6 (but also on 11.2.10-h13—I was in the middle of the update but rolled back to limit its impact). GP client version—primarily 6.3...
Hello , I am using a Palo Alto PA-5220 running software version 10.2.11-h12, and I am currently experiencing an issue with Commit Failed and Dynamic Updates. For the Antivirus/Threats dynamic updates, I have configured the schedule to Download, and the download completes successfully. However, the update is not being installed automatically. Cou...
I had a PAN-DB license for URL Filtering. After renewing the licenses, there is Advanced URL Filtering instead. But it is not functioning. When I try to add a profile, there is a note at the bottom that says License required for URL Filtering to function. I deleted old keys from the CLI. When I fetch the license, it appears again. Could you plea...
Hi Friends, We have a customer who is experiencing issues after upgrading their firewall to version 11.1.4-h7. The firewall is not functioning properly, with many websites being inaccessible and few customer reported a sudden spike in management plane usage. I suspect this could be due to a bug in this PAN-OS version, as multiple customers hav...
Hello,I'm planning to upgrade my Palo Alto FW appliance from 10.2.10-h9 to 11.1.13-h7, preferably. Do I need to download 11.0.0 and install a version of that, or can I go directly to 11.1.13-h7 using 11.1.0, which I've already downloaded? Can anybody helps me with upgrade planning? Thanks a lot
Hi, Could anyone please share the CCATS documents and SC037 of HK import documents for PA-440? Since we need to export from HK to TW and need those for license application.
Hello, I am having an issue setting up user-id when the firewall is in FIPS-CC mode. Here is the following issue: Environment: PA-3440, PAN-OS 11.2.10-h7, FIPS-CC mode enabled Windows User-ID Agent v11.0.3-134 (identical version on both hosts) Issue:I have two Windows-based User-ID Agents configured under Device > Data Redistribution &g...
We have a NGFW hosted by Rackspace in the US. Any new attempt to connect to the Global Protect gateway portal fails. We can ping and tracert to the I.P. address and domain of the gateway, but whenever we go to connect via the Global Protect VPN client or we attempt to go to the web portal via browser the connection fails with an EMPTY_RESPONSE. ...
We are using Palo Alto Cloud NGFW for Azure and need to verify the OS/software upgrade details for our deployed firewalls. Could you please let us know: How to check the current PAN-OS/software version running on Cloud NGFW? Where can we find the OS upgrade start time and end time for previous upgrades? Are upgrade logs available in Azure Porta...
I am trying to upload a TSF to the Quest Asc tool, The TSF is 120 MB. When I upload no error but it keeps spinning. I have tried it few times and no luck. I have a good stable internet and good upload/download speed. Tried different browser but no luck. The only thing I can think off is Netskope but don't see any blocks either.
I was asked to assist with a new wildcard certificate that was uploaded to the firewall yesterday, update the SSL/TLS Service Profile and confirmed settings for GP. Commit failed so began reviewing configuration. The 2 reasons listed for the failure were: client useridd phase 1 failureclient gp_broker phase 1 failure Double checking and the...
Not sure what happened but it seems that all my firewalls stop sending logs to panorama (local log collector). I have a ticket open with PAN support but not really getting anywhere. Recently upgraded PANORAMA to 11.1.13-h3 and added additional collector disks to PANORAMA. Also forwarded logs from PANORAMA log collector to our syslog serv...
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
