This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
AIOps for NGFW Discussions
This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
AIOps for NGFW Discussions
This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.
About AIOps for NGFW Discussions
This forum is to ask questions, provide answers, and troubleshoot queries related to Palo Alto Networks’ AIOps for NGFW, the industry’s first AIOps solution for Next-Generation Firewalls.

Discussions

Start a conversation

Unable to Upgrade PAN OS to 9.1.13-h3 from 9.1.11-h3- Error: findfs: unable to resolve 'LABEL=sysroot0'

We are trying to upgrade the PAN-OS of PA-850 to 9.1.13-h3 from 9.1.11-h3. initially when clicking on install getting an error as "The software manager is currently in use. Please try again later". then we have run the command "debug swm unlock" in CLI. After that when trying to install get an error as "Error: findfs: unable to resolve 'LABEL...

Failure BPA on demand "Failed to generate report. Request timed-out"

Hello, With the transition of the BPA to AIOPS, I’m currently unable to do BPA on demand with my firewalls under PAN-OS 9.1 (PA-3020 and PA-3060). Indeed, after successfully loading the TSF, it stuck with this message “Processing TSF file” before to trigger a failure ("Failed to generate report. Request timed-out"). Despite, I was able to do...

Best Practices Question

Currently have the FREE version of AIOps. Noticing some anomalies with the best practices analysis (and from reading on the forums, it appears others are to). One example I have and curious if others are seeing it. In the Best Practices Dashboard looking at the Network->Network Profiles, it is identifying Ipsec Crypto Profiles and alerti...

ZoneProtection to intrazone /interzone

Hi all If I use from zone=any to zone=INTERNET it failed in the AIOps/BPA ZoneProtection. So I add from/to Zone to all my rules to get the % up. Still not 100% due to ZoneProtection missing in the 2 default rules. I can not figure out how to add zones/ZP to a intrazone/interzone rule. Bug?

NilsGab_2-1699609931611.png
NilsGab_1-1699609910806.png
NilsGab by • L1 Bithead
  • 1442 Views
  • 1 replies
  • 0 Likes

Issues ggetting Pa tp report to the AIOPS page

i am trying to get my PA's to report to the portal and was told that I need to renew the device cert that already shows a valid cert under panorama. I was told that this will cause the connection to reset and connecct back to the portal. If I select "get certificate" It states that teh current cert will revoke and create a new one. Dont want t...

PNevs_0-1699911774131.png
PNevs by • L2 Linker
  • 1247 Views
  • 1 replies
  • 0 Likes

Resolved! Integration of Fw, to Aiops

Hello team: To integrate fw to Aiops, do you only need to activate telemetry in the fw and launch the application from the support portal?Isn't there any type of synchronization needed, such as by serial number of the fw or something like that? Greetings. AIOps for NGFW

Announcing Root Certificates Expiration Alerts in AIOps Free and Strata Cloud Manager with AIOps Premium License

Announcing New AIOps Alerts for PAN-OS Certificates Expiration In our commitment to bolstering network security, we're excited to announce a significant enhancement to our Strata Cloud Manager platform. This update, to be released later this week, specifically addresses the critical issue of PAN-OS root and default certificate expiration. T...

pasted image 0.png
pasted image 0 (1).png
ainfante by • L2 Linker
  • 4090 Views
  • 0 replies
  • 0 Likes

Resolved! Error Loading On-Demand BPA Reports

Until a few months ago, I was able to generate the On-Demand BPA without any problems, but I went to do it today and immediately got the message "Error Loading On-Demand BPA Reports". When importing the TSF, it displays the message that it was loaded successfully, but it does not open. Everything leads me to believe it's something on the website...

Resolved! DNS Security adoption rate in 0%

Hi As per the changes in AIOps, my DNS Security is shown as 0% adoption rate, even if in the old BPA reports (from support page) has shown that we've been using the DNS Security options. In my configuration, we have sinkhole for all domains, extended packet capture for C2, following the documentation DNS, but still no success on changing it's ra...

Rules without App-ID - Failes

Hi allI have configured most firewall allow rules with application and port(s). Still only get 88% on the App-ID in BPA. It tells me I need app on deny/drop rules, why? If I block all apps to TOR network, I do not need app! Bug or some configuration I need to do in AIOps/BPA?

NilsGab_1-1699609738600.png
NilsGab_0-1699609599728.png
NilsGab by • L1 Bithead
  • 1249 Views
  • 0 replies
  • 0 Likes

AIOps for NGFW - Data Refreshing

When I made changes to my PA-410 based on best practices from AIOps for NGFW, I noticed that a day later I didn't see that AIOps for NGFW updated the best practices, removing the failed check. Is there something that I have to do in AIOps for NGFW or on the PA-410 for the information in AIOps for NGFW to be continually updated? Thanks GW

  • 158 Posts
  • 58 Subscriptions
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks