This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PANOS Global Protect Azure SAML w/ Self-Signed Certifcate on Firewall

Looking to see if anyone has done the above configuration. Essentially 2 sets of firewalls, 2 locations, managed in Panorama. I created the portal on 1 set, using a self-signed certificate on the firewall (used the PA-VM as the CA and then issued itself a certificate). Created 1 gateway on the local VM, then planned to issue the remote VM a c...

DJ_1924 by • L2 Linker
  • 23 Views
  • 0 replies
  • 0 Likes

Best free Syslog server 2026

Hi everyone, we are currently trying to set up a syslog server as we would want to retain older logs in case we need it for auditing purposes. We are looking for a free one that's good in 2026. I'm currently choosing between an ELK stack and Wazuh, which would be easier? I have experience in setting up Docker containers. Was looking at Graylogs ...

Automatic Certificate Renewal for Global Protect Portal

With the pending move of publicly issued certificates to a shorter time frame, is there anyway to ease the amount of effort to get the new certificates installed on the firewalls since it will now need to be done multiple times a year? Working on a few that will using SAML for authentication and be managed by Panorama so trying to see the best ...

DJ_1924 by • L2 Linker
  • 163 Views
  • 3 replies
  • 1 Likes

Warning: External Dynamic List XXX is configured with no certificate profile

Hi all, I've been following this Article but I've run into an issue. When I try to edit an existing EDL and assign the Certificate Profile I created, the dropdown only shows "None (Disable Cert profile)" — the new certificate profile isn't listed as an option. However, when I create a brand new EDL, the certificate profile I created is available...

MaratP by • L1 Bithead
  • 991 Views
  • 2 replies
  • 0 Likes

PAN-OS Dark Mode

I am surprised there is not a Dark Mode. I have seen comments on using CLI and other Third Party apps to change, This can effect how the GUI is viewed. I have noticed when doing this with other apps you can miss critical info. I would say this is a feature add that needs to be made. I have issue with my eyes that the bright background makes it h...

Resolved! Wildfire Malware detected miniwallet.bundle.js as Malware, VirusTotal does not list it

Hey we are using Cortex XSIAM and have been getting alerts on miniwallet.bundle.js apparently during MS Edge updates.From what I can see the Wildfire Verdict has changed yesterday. However, reading the report, I cannot explain why it is considered Malware. Googling also did not get me any further.Most interestingly: On VirusTotal the correspon...

PAN-OS 12.1.X Firewalls & Panorama Managed

Just a heads up to the community apparently there's an issue with firewalls that are 12.1.X that are configured to be managed from Panorama. Apparently PAN-322826 exists where any hardware that's Panorama managed can spontaneously suffer a hardware reload due to a "configd" memory leak. (A 4 months long case finally got us this info.) To my k...

Resolved! EDL server certificate authentication failed. A local copy of associated external dynamic list will be used

Since Saturday 7/12/2026 I've started receiving these messages on our firewall every few minutes. eventid: tls-edl-auth-failureobject:fmt: 0id: 0module: generalseverity: criticalopaque: EDL server certificate authentication failed. A local copy of associated external dynamic list will be used, so it won't impact your policy. EDL Name: Cortex I...

Resolved! [SOLVED] Prisma Browser Issue "No upstream gateways available & GlobalProtect/Remote Networks Push Jobs Fails Continously"

Hello LiveCommunity Team! I created this post to share my experience regarding some Issues that recently seen on the Prisma Browser and Mobile User GlobalProtect pushed failing multiple times!We had configured Prisma Browser alongside GlobalProtect—deployed via Strata Cloud Manager (SCM) to work seamlessly; however, a few days ago, we began seei...

DanielSRomero_0-1783546154021.png
DanielSRomero_1-1783546483912.png
DanielSRomero_2-1783546809140.png
DanielSRomero_3-1783547353425.png

Site to site VPN between PA & Azure || Failover / HIgh availability

We have configured two Site-to-Site VPN tunnels between our Palo Alto firewall and Azure VPN Gateway to provide redundancy and high availability. However, we are encountering an issue where we are unable to keep both VPN tunnels active simultaneously: When both VPN tunnels are up, connectivity between our on-premises environment and Azure becom...

PA 5540 Deployment

I recently purchased a 5540 pair and plan on deploying them in the next few months swapping out a 5250 pair. I'm curious if anyone has worked with the 5500s yet, or even PANOS 12.1? Any comments or feedback you might have based on what you've seen so far.

Deny authorization request for '_telemtryuser'

The other night I got a system alert email with the following message (truncated for obvious reasons): type: SYSTEMsubtype: generalmodule: generalseverity: highopaque: Deny the authorization request for the admin user thru CLI, '__telemetryuser' from 'Console or telnet' I found the article regarding the existence of _telemetryuser (https://kno...

P.Betts by • L0 Member
  • 148 Views
  • 1 replies
  • 0 Likes

Captive portal reauth

Im using captive portal in Palo Alto and each 3-4 hours i receive this: I need to reauth. Why is happening this? any timeout o cookie? where should i check?

Captura de pantalla 2026-07-02 132032.jpg
BigPalo by • L4 Transporter
  • 186 Views
  • 3 replies
  • 0 Likes
  • 24409 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks