General Topics

Configure Split tunneling by domain

Hi,

I just configured split tunneling by domain using this domain test: *.admin.microsoft.com (port 443)

But i can not see this traffic going into the tunnel. how can i tshooting this?

thanks

how to disable the url-cloud-connect

the customer firewall pa3220,version :10.2.1, the mgt interface could not access internet,so that firewall could not upgrade the url database.

but the system log dispaly some high log:url-cloud-connect-failure,the customer want don't see these log.

fir

mkv mov mp3 mp4 mpeg msi torrent apk avi avi-divx avi-xvid-this type of format file block

how to block mkv mov mp3 mp4 mpeg msi torrent apk avi avi-divx avi-xvid-this type of format file block

Customize Authentication Complete URL

Hi,

i would like to customize the URL Authentication complete in GP. i was checking this KB: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authent

Queries regarding .crx3 chrome extension

We are currently experiencing a significant increase in bandwidth consumption on our network due to users downloading .crx3 files, which are Chrome extension packages. Our Palo Alto Firewall does not natively recognize or allow us to block the .crx3

Connection Failed unreachable macbook

Unable to connect in mac mini

06/29/2025 12:07:37:787 [Info ]: Started the Portal pre-login
06/29/2025 12:07:37:787 [Info ]: CPanMSService::PreloginPortal CheckServerCert return 0x2000
06/29/2025 12:07:38:055 [Info ]: Portal pre-login result receive

block geo location IP version 6

Is palo Alto supporting  Geo location blocking for IP version 6? 

Palo Alto FW and Panorama Requirements for 11.1 or 11.2 version

Hi, 

I need help asap how to know if Palo Alto VM Series at 10.2.x  can update to 11.1 or 11.2 is there a link to help me. Is the CPU, Memory, Hard Drive Size the main factors.

If you can give an example would be very nice.

Thank you. 

Export Codes - HS/ECCN/CCATS

Hi, 

I'm looking to obtain the export codes for some Palo Alto Network products.  Can anyone point me in the right direction to obtain these?

Thankyou, 

Upgrade while the /dev/root is high

Hi,
I'm wondering if I can smoothly upgrade the firewall if the dev/root is above 90%
Note that the /opt/pancfg is at 60%.

Any thoughts on how to whitelist Akamai IP ranges?

Hello Network,

Any thoughts on how to whitelist Akamai IP ranges? I am hoping to use MineMeld as the aggregator of the information.  We currently use it for AWS but I did not see a node built for Akamai.

Thanks in Advance,

Scott 

DHCP Lease Issue

• Device details:
• • Model - PA 3020
  • Software version - PAN OS – 8.1.3

• Problem Description:
• • Please be informed that we are frequently encounter DHCP lease full (100%), and it cause interruption for our users at region side.
  • Customer side have two vlan for

GlobalProtect - Multiple Client Settings

Following a change to move from LDAP (Local Domain Controllers) to Azure SAML with MFA enabled we are experiencing an issue with the use of multiple Client Settings Configs on a single Gateway.

We use the users section to identify a subset of users