General Topics

Unable to set SSL/TLS Service Profile with Panorama

GlobalProtect 6.3.3

Our vulnerability scanner for the last couple weeks has been reporting vulnerabilities for GlobalProtect that are remediated with an upgrade to 6.3.3, but other than the vulnerability acknowledgement from PA mentioning it I do not see any evidence of

A question about ECMP

Hi，

    I saw a function named ecmp on palo alto NGFW, I think that it can make outbound traffic load balance on two or more physics line or logic line. And I also saw there was a inbound interface information in the session table of firewall.

   So

Global Protect application blank screen

Hello Members,

Can anyone help me to solve the global protect blank screen issue on my PC, as for others it normally works fine.

I am using Windows 11 and I have already removed and re-installed the GP App but still it shows a blank screen and I

VPN issues with 3 ISPs

After upgrading to the pa-850 10.2.13-H3 version, problems started occurring in one of the ISPs. There are 3 ISPs, the first two main ones and the third one as a secondary ISP which manages the VPNS. After the upgrade the configuration was maintained

GlobalProtect to Facilitate Multi-Factor Authentication Notifications

I'm working on setting this up, however when the popup box appears on the laptop wanting me to click on the link for additional authentication I am brought to a webpage saying the connection has timed out. Now the url is going after <ip address>:6081

Disk usage alerts

I have a small doubt, always the /opt/pancfg exceeds 80% and I get a constant alert, I would like the alert not to jump at 80% but to start jumping the alert at 90% or so, is it possible to change the percentage of the alert?

API error messages

Hi all

This error message keeps coming up:

The latest API KeyGen was executed on <date and time> with the deprecated algorithm. You are advised to configure the more secure API key infrastructure by web interface: Setup -> Management -> Authentia

Test Beta Program for ARM process

Hello,

Do we have a contact of Palo where we can ask for information about BETA Program?

Thanks

Disabling bad checksum on Firewalls

Hi All,

We have received an request to disable the drop of packets due to bad checksum. I had the following questions on this:

Q1: Can i see in the traffic logs if any connections are dropped due to bad checksum.

Q2: This can be done by enterin

Feature Request List

Hi community

In a lot of topics there are discussions and questions about PAN-OS enhancements and missing (not yet implemented) features. So far the PaloAlto Feature Request list isn't available to the public but in a lot of these existing topics f

MFA external provider question

Hello Community,

I have always use don-prem solutions for MFA. Currently I am researching using a 3rd party provider, (Duo v2, Okta Adaptive, PingID, and RSA SecurID) . Which one do you use and would you recommend them? I was considering Duo since th