User-ID rule to bypass HIP check not matching.

Hi all,

I have a rule to allow certain Global Protect users DNS and RDP traffic by matching the user-id. However, even though it looks like the traffic should match when I view the traffic log it's not?! For some users the rule works fine but others

External Dynamic List retrieval on PAN-OS 9.1.2

Hello message board, this is my first post!!!!

I am trying to set up a EDL feed from XSOAR into the NGFW for O365 IPv4 addresses. Tested the feed using curl, both locally and remote, and it is working. The issue is fetching the list from within the N

Source ip region/country showing incorrect on PA firewall

In the Palo alto firewall for the public ip 205.254.183.218 source ip region is showing as US. but user is located at India.
we have given access on firewall for source region India only for inbound traffic.

In the traffic logs source country is showin

Ubuntu 18.04 install errors

Hi There, 

Running into issues trying to install on Ubuntu 18.04

During the install process at the end I get this message:

TASK [minemeld : requirements] ******************************************************************************************

Syslog server flapping passive firewall.

I have Syslog configured in my firewall. but I am getting alerts on the passive firewall for two weeks.

The service route is configured via the management interface. the alerts are generated frequently.

The active firewall is working fine.

Below is the

PANGP virtual adapter disabled automatically

Many of users are facing issue in connect Global Protect VPN. We notice when we restart PANGP virtual adapter disabled automatically .we restart service and after that issue fix for day or two day’s but again this issue persist. Requesting you please

JSON format

I have a PAN config that is in json format that I want to implement on a 3060 fw.  It seems that the fw will only take config in "set" command format or .xml.  I am new to PANOS, I know in JUNOS you could do a "load override terminal" and drop this f

SMTP default port change in panos 9.1.6

Hi Team,

We are configuring email server for critical system alert.

We have got gateway IP and port as 587. By default i think port 25 is supported for SMTP. 

Is it possible to change port number 587 in panos 9.1.6 ?

This option is available in panos 1

Not able to login to Production Firewall

Hi have HA 32XX Series production firewall 9.0.5 version, I was doing password comlexity comit and after that i am not able to login via GUI/SSH/Consle and showing invalid password.

I opened TAC and they suggested to revert configuration via maintain

MineMeld on outdated jQuery libs

Hello Folks,

I've noticed MineMeld application uses outdated jQuery library.  Version 2.1.4 has known security issues. The Outdated jQuery libraries may be vulnerable to a cross site scripting.

Would it be possible to move towards something more up t