User Group limits on firewall

Hello,

Recently I got error below on PA 850 device(8.1.13)

-User Group count of 1098 exceeds threshold of 1000

The log is straight forward, number of group is exceeding the limit, but I have some question.

1. I have one more device,PA-3220, which look

GlobalProtect Split-Tunnel - Some Clients get Invalid Address Errors to Excluded Domains

We've published GlobalProtect 5.0.5

I added some Exclude Domains and Applications to our Gateway's Split-Tunnel configuration over the weekend.  Afterwards, about 5-10% of our VPN clients can not access these domains at all while on VPN.  The domains

Logvolume difference between Palo Format to Splunk and CEF Format to Azure Sentinel

Hi everyone,

during migration of our log analysis from splunk to azure sentinel, we experienced significantly higher volume of logs on Sentinel then we did on splunk. We were actually sending logs to both and Sentinel showed more then twice the volum

PAN OS 10.2.2 2-FA OTP issue

Dear community

After upgrading my Palo Alto 820 to PAN-OS 10.2.2 I've faced with 2-FA OTP issue. The device requests for the OTP but responds after 3 minutes with Timeout. There was no issue on the network and the OTP server side. OTP server sends

i have the palo alto vm 10.0.3 version , need help

Using this image for labbing on EVE-NG pro and i cannot create a working active standby cluster as both instances of the node that i created have the same serial number, is it possible to change the serial number of the node upon creation? what is th

Getting validation error when pushing changes from Panorama to firewall

We are trying to push device group configuration to the managed firewalls but validation itself failing.

It throws the error as application status -> rockwell-factorytalk-viewpoint 'rockwell-factorytalk-viewpoint' is already in use.

Anyone experi

Global protect client for windows 11

Are the Global protect agent is compatible with windows 11?

Config changes retention in Palo Alto For non root user with read only admin access

Config changes retention in Palo Alto For non root user with read only admin access

Hello All,

I have recently come across the issue of read only admin access config change 10-15 days back but same not reflecting in the commit when I checked. So,

GlobalProtect Cloud Services Route Precedence

We have had overlapping subnet scenarios where someone is connecting using GlobalProtect Cloud Services from a subnet that overlaps our internal subnet and, as they have a more specific route, access to internal resources is failing as the taffic is

Utilizing ZTP with On-Site Spare PA440

Can I add On-Site Spare PA-440 firewalls with ZTP?

Thanks

TCP session timeout behaviour

Hello,

I have a question about the mechanism of TCP session timeout on PA FW. Assuming that default TCP timeout on PA device is 3600 seconds. What happen after a TCP session is idle after 3600 seconds ? Does the FW send TCP RST at each endpoints ? Or