Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
24464 PostsThe Custom Signatures discussion is a resource for security professionals to discuss the creation process of custom signatures in their PAN-OS appliance.
176 PostsHave you encountered a false positive verdict for Palo Alto Networks (Known Signatures) on VirusTotal? Use this forum to submit a verdict change request. Change requests should include the File Hash, Link to VirusTotal report, current VirusTotal verdict, and description.
809 PostsPost questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to all things Network Security.
5031 PostsPost questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Palo Alto Networks’ Cloud Delivered Security Services.
660 PostsPost questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Prisma Access and Prisma SD-WAN.
585 PostsPost questions, provide answers, share best practices, and connect with peers and experts in this area dedicated to Cortex XDR, XSOAR, and Xpanse discussions.
4650 PostsHello Community, We are experiencing an issue with exporting Stats Dump file required for SLR report on PA-410 firewall.The option to export Stats Dump file is not available in web GUI, and the corresponding CLI command returns an "Invalid syntax" error. Environment:Firewall Model: PA-410PAN-OS Version: 11.2.13-h2 Could anyone please clarify...
I am on 11.1.13 Does the NGFW or Panorama have traps for expiring or expired certificates? (Used for mgmt access and secure communications channel) I the trap below in MIB file for 11.1 however it does not seem to be triggering when certificate expires. .1.3.6.1.4.1.25461.2.1.3.2.0.3220 panTLSCertificateExpiredTrap
We have GlobalProtect Agent 6.2.8-c317 yesterday some users could connect but could not access network files or get on the internet. Other user no problem. Nothing changed on our network other then the GP VPN license expired 2 days ago even though we paid for the renewal 3 weeks ago. I am not a Palo Alto person and since I cannot get to support...
Folks, I have a standalone hardware firewall and I'm am trying to to use what was the AIOps Essentials functionality now bundled with Strata Cloud Manager Essentials. The telemetry data is flowing from my firewall to SCM. Since installation I have performed a Commit on my firewall. In SCM Insights > NGFW > Status and Monitoring I see...
Hello, Recently, I’ve been noticing quite a few false positive alerts related to the use of Claude AI. I’m investigating these alerts and trying to understand exactly what Claude is doing on the endpoint. I would like to review the command history and the actions performed by the application, but I cannot find enough information directly in the ...
Hi Everyone, I'm currently designing SD-WAN policies for our Palo Alto environment and would appreciate hearing about real-world best practices and deployment experience. I'm trying to determine which applications and traffic types should be assigned to Best Available Path versus Weighted Session Distribution. My current thinking is: Best Avail...
hello experts, the default PB provide few web customization, is it possible to modify the contents in the portal by modify the html? thanks, sdg Prisma Browser
In the PA documentation, it says Zone protection is applicable to new connections that does not have any existing session. To mitigate flood protection that will works definitely. However under Zone protection profile we have packet based attack protection which deals packet based attacks which uses certain option in layer3 and 4 of a packet. ...
Using CLI on Palo Alto by serial in for connection to ensure firewall is allowing access for panorama.
dataset = okta_sso_raw| filter (debugContext contains "New Geo-Location=POSITIVE" and debugContext contains "New Device=POSITIVE") and (eventType in("user.mfa.factor.activate", "user.lifecycle.create", "system.import.user.create"))| alter user_id = if(eventType = "user.lifecycle.create" or eventType = "system.import.user.create", json_extract_sc...
Hi team, I would like to inquire about formal information and guidance regarding the post-quantum cryptography (PQC) strategy within the Cortex XDR ecosystem. What developments, features, or updates planned on the Cortex roadmap could you share with us? Is there currently any functionality, pilot, or integration in the console or agents that add...
After patching our panorama to 11.2.15 our API Users can only do commits. commit all (push) is denied with 403.Nothing had been changed with the api keys, or the permissions regarding webui / xml apiAny idea?
Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface? I tested and it seems I only need Panorama to allow FW IP. But from the article below for MGMT interface profile it mentions adding Panorama IP is required. https://live.paloaltonetworks.com/t5/general-articles/why-it-s-essential-to-secure-your-m...
Dear all, We have face an issue recently with our Palo Alto HA pair. When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all. The only recent change we have implemented was the CIS Device H...
| User | Count |
|---|---|
| 5 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
| User | Likes Count |
|---|---|
| 4 | |
| 2 | |
| 2 | |
| 2 | |
| 2 |
