global protect connectivity issue (version 5.2.10)

Hi Team,

We have facing the connectivity issue on GP Agent 5.2.10.

After turning off the windows firewall, it's connecting.

Please let us know how we can achieve this without disabling the windows firewall. Because in earlier versions of GP client we

User-ID Agent not mapping users

Hello,

Im trying to configure User-ID Agent.

Dedicated users is created, with details acroding to: Create a Dedicated Service Account for the User-ID Agent (paloaltonetworks.com)

Agent version: 10.0.4-23

Agent is installed on Windows Server 2019.

DC's a

Exporting monitor logs is not showing decrypt flag information.

PANOS- 8.1.12h3. .When I export monitoring logs in excel . It doesn't show decryption flag info even when I can see decryption (yes/no)

in the monitoring logs.

Path Monitoring Static Routes

Hello All,

For some locations we have 2xISP setup, since we have no dynamic peering with any of those, we do a default static route via each of those. Having 'ECMP/Source IP hash' enabled it works just fine in a lab. We also do path monitoring for ea

Dynamic DNS Bind server updates from DHCP

Curious if the PA-3220 we are looking to use can dynamically send DNS updates to our Bind9 server whenever a DHCP request is granted from our PA DHCP scope we've setup? I know we can get a linux version of DHCP on our Linux server, but would rather l

Decrypted traffic via firewall.

I don't have any decryption policy configured.
But I see port -443 traffic has decrypted flag yes in Traffic logs.
Is it normal for firewall to decrypt 443 traffic even when there is
no decryption policy?

PANOS0-9.1.10 VM-300

API URL Logs Issue

In the below code - I"m using the API to query the URL logs. It works great.

What isn't returning though is the src.user field, if it's mapped. How can I get this value? Do I need to do a separate query?

Apply TS Agent config automatically in FW

Hi,

We are expanding our CITRIX platfon in which we have installed a Palo Alto TS agent to monitor. So to avoid introduce manually the TS agent config in Pa (IP, port,etc) each new citrix. Is there any way to send the config to PA to do ir automatica

FW loses user mapping stop matching rule suddenly

Hi,

We are having a strange issue in our FW. User in VPN-SSL reported the stop working. The issue doesnt have any pattern. Random users, random time-range. 

The issue is solved when the customer force to reconnect the VPN or force pass the HIP check i

Patching One HA fully then the next.

If patching a HA pair to the next Major version i.e. 9.0.6 -> 9.1.0  is it safe to patch one of the pair all the way to 9.1.0 (minor versions and major versions) 

And then fail over and do the other firewall to bring that up to latest minor and final

GlobalProtect stuck on connecting ( still working ... ) on macOS monterey - 5.2.10-6

Hello,

after upgrading to macOS Monterey globalprotect stopped working...

i tried to unistal reinstall 20x, firewall of/on, private relay of/on, i did allowed it in security, limit IP address tracking of/on, tried with "spctl kext-consent add PXPZ95S

Occupation of VPN Pools in Paloalto Monitor

Hello team

Could someone tell me if it is possible to see the occupancy of the VPNs in the Paloalto pools?

If so... How can I see it?

Thanks

Greetings.