This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

"Your login session has expired" errors when authenticating to GP portal

Dear community! We are currently experiencing an issue where after authenticating to the globalprotect portal page with the browser, we get the following message :"“Your login session has expired and you have been logged out for security reasons...” And we cannot get to the portal page. It only works with Mozilla firefox or Edge in IE compa...

Carracido_0-1784638080115.png
Carracido by • L4 Transporter
  • 18 Views
  • 0 replies
  • 0 Likes

Best Practice for Managing Short-Lived Public Certificates on Panorama-Managed Firewalls?

Hi everyone, With the industry moving toward shorter validity periods for publicly issued SSL/TLS certificates, I'm trying to plan ahead for certificate management on our Palo Alto firewalls. We have several firewalls that are managed through Panorama, and some of them will also be using SAML for authentication. Since public certificates will ne...

Sizing help — university internet edge, 3 Gbps today, 4,000–5,000 students, 7-year lifespan. PA-3430 / PA-3440 / PA-5410?

Looking for sizing advice from anyone running PAN at a university/campus internet edge. Environment: University with 4,000–5,000 students plus staff/faculty Current internet bandwidth: 3 Gbps — expect this to grow substantially over the appliance's life (bandwidth per student keeps climbing; wouldn't be surprised to hit 8–10 Gbps by end of life...

simsim by • L4 Transporter
  • 29 Views
  • 0 replies
  • 0 Likes

Best free Syslog server 2026

Hi everyone, we are currently trying to set up a syslog server as we would want to retain older logs in case we need it for auditing purposes. We are looking for a free one that's good in 2026. I'm currently choosing between an ELK stack and Wazuh, which would be easier? I have experience in setting up Docker containers. Was looking at Graylogs ...

Automatic Certificate Renewal for Global Protect Portal

With the pending move of publicly issued certificates to a shorter time frame, is there anyway to ease the amount of effort to get the new certificates installed on the firewalls since it will now need to be done multiple times a year? Working on a few that will using SAML for authentication and be managed by Panorama so trying to see the best ...

DJ_1924 by • L2 Linker
  • 149 Views
  • 3 replies
  • 1 Likes

Warning: External Dynamic List XXX is configured with no certificate profile

Hi all, I've been following this Article but I've run into an issue. When I try to edit an existing EDL and assign the Certificate Profile I created, the dropdown only shows "None (Disable Cert profile)" — the new certificate profile isn't listed as an option. However, when I create a brand new EDL, the certificate profile I created is available...

MaratP by • L1 Bithead
  • 948 Views
  • 2 replies
  • 0 Likes

PAN-OS Dark Mode

I am surprised there is not a Dark Mode. I have seen comments on using CLI and other Third Party apps to change, This can effect how the GUI is viewed. I have noticed when doing this with other apps you can miss critical info. I would say this is a feature add that needs to be made. I have issue with my eyes that the bright background makes it h...

Resolved! Wildfire Malware detected miniwallet.bundle.js as Malware, VirusTotal does not list it

Hey we are using Cortex XSIAM and have been getting alerts on miniwallet.bundle.js apparently during MS Edge updates.From what I can see the Wildfire Verdict has changed yesterday. However, reading the report, I cannot explain why it is considered Malware. Googling also did not get me any further.Most interestingly: On VirusTotal the correspon...

PAN-OS 12.1.X Firewalls & Panorama Managed

Just a heads up to the community apparently there's an issue with firewalls that are 12.1.X that are configured to be managed from Panorama. Apparently PAN-322826 exists where any hardware that's Panorama managed can spontaneously suffer a hardware reload due to a "configd" memory leak. (A 4 months long case finally got us this info.) To my k...

Resolved! EDL server certificate authentication failed. A local copy of associated external dynamic list will be used

Since Saturday 7/12/2026 I've started receiving these messages on our firewall every few minutes. eventid: tls-edl-auth-failureobject:fmt: 0id: 0module: generalseverity: criticalopaque: EDL server certificate authentication failed. A local copy of associated external dynamic list will be used, so it won't impact your policy. EDL Name: Cortex I...

Resolved! [SOLVED] Prisma Browser Issue "No upstream gateways available & GlobalProtect/Remote Networks Push Jobs Fails Continously"

Hello LiveCommunity Team! I created this post to share my experience regarding some Issues that recently seen on the Prisma Browser and Mobile User GlobalProtect pushed failing multiple times!We had configured Prisma Browser alongside GlobalProtect—deployed via Strata Cloud Manager (SCM) to work seamlessly; however, a few days ago, we began seei...

DanielSRomero_0-1783546154021.png
DanielSRomero_1-1783546483912.png
DanielSRomero_2-1783546809140.png
DanielSRomero_3-1783547353425.png

Site to site VPN between PA & Azure || Failover / HIgh availability

We have configured two Site-to-Site VPN tunnels between our Palo Alto firewall and Azure VPN Gateway to provide redundancy and high availability. However, we are encountering an issue where we are unable to keep both VPN tunnels active simultaneously: When both VPN tunnels are up, connectivity between our on-premises environment and Azure becom...

PA 5540 Deployment

I recently purchased a 5540 pair and plan on deploying them in the next few months swapping out a 5250 pair. I'm curious if anyone has worked with the 5500s yet, or even PANOS 12.1? Any comments or feedback you might have based on what you've seen so far.

Deny authorization request for '_telemtryuser'

The other night I got a system alert email with the following message (truncated for obvious reasons): type: SYSTEMsubtype: generalmodule: generalseverity: highopaque: Deny the authorization request for the admin user thru CLI, '__telemetryuser' from 'Console or telnet' I found the article regarding the existence of _telemetryuser (https://kno...

P.Betts by • L0 Member
  • 141 Views
  • 1 replies
  • 0 Likes

Captive portal reauth

Im using captive portal in Palo Alto and each 3-4 hours i receive this: I need to reauth. Why is happening this? any timeout o cookie? where should i check?

Captura de pantalla 2026-07-02 132032.jpg
BigPalo by • L4 Transporter
  • 182 Views
  • 3 replies
  • 0 Likes
  • 24410 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Latest Comments
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks