Model: Panorama VM Version 11.1.13-h5Kindly advise, Panorama SD-WAN Plugin shows no data, even though the device traffic logs already forwarded to Panorama it has exactly same issue with this document:: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sZtYCAU we have verify 1. Traffic log forward to panorama succes...
When setting the password complexity on the Palo Alto firewall, I set only the expiration date to 60 days and locked the account. Is there a way to keep or leave related logs in the system log before the expiration date? If there is any content, please also provide a link to a site where I can refer to it.
Hello, How do I set up a custom alert in IoT Security to detect specific device vendors? I have several MAC vendor/OUI codes and want an alert whenever a device matching one of them connects to our network.
Currently, PowerShell activity generated by an AI Agent is being detected by Cortex XDR. After investigation, we confirmed that this activity is a false positive, as the AI Agent uses PowerShell for administrative/management purposes. Due to our internal operational policy, we cannot use Legacy Exceptions, so we are considering using Exclusion R...
I have installed MANY ION 3200 chassis with the PAN-ION-RACKTRAY-ION. Inside that four post racking tray intended for four post racks is this mystery item: Bracket, Cross bar, 2-post rack Kit SD-WAN 540-000934. Why is a small 2 post kit shipped with this enormous shelf? How in the world is this part utilized or installed? Yes this is not ...
what are the primary advantages of shifting from on-premises security hardware to a cloud-based model in terms of scalability and global policy consistency?
I m from SITA and wanted to see my Airports and end points
Hello Team, After upgrading GlobalProtect to 6.3.3-1121, we have noticed that Mac devices are automatically connecting to the VPN without any user intervention. Is anyone else experiencing the same issue after upgrading to this version? Please let us know if you have observed similar behavior
Hello Palo Alto Networks Support Team, I would like to ask about the current method for updating content via the CLI. Previously, we used the following command to install a specific content version: request content upgrade download <content version> https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-upgrade/cli-commands-for-upgra...
Hello everyone, I have an active Precision AI Network Security Subscription Renewal Bundle for a firewall. However, when I log in to the Customer Support Portal and navigate to Products > Assets, then select the firewall, I do not see a Device Security license listed. I found the following document, which mentions Device Security: https://d...
We are trying to manage GlobalProtect through SOTI MobiControl by locking down the portal address. I have the Managed App Config enabled in MobiControl with the portal address defined which does lockdown the portal address field in the settings. The issue is when there is an error connecting to the portal address for whatever reason, GlobalProte...
For those of you who are curious, one of the trends we've been tracking that led to the development of Advanced IP Defense is this evasive technique of malware connecting directly to IP addresses — meaning they're circumventing standard inspections on the URL or domain layers.Check out this Unit 42 research blog digging into this trend. Also che...
Hi everyone! Some of you may have noticed that we just launched a brand new CDSS subscription: Advanced IP Defense. The TL;DR of this new threat protection solution that we're blocking attacker infrastructure on the network layer, stopping novel, evasive threats while eliminating the heavy operational burden of legacy blocklists. Check out o...
I have a question. When we perform a Dump Alert and get the ZIP file, how can we analyze it in more detail? For example, if I want to see the .ps1 file that a particular user executed on the machine and that triggered the alert, would that file be included in the dump? I’ve already searched everywhere, but I can’t find it. I can see a folder cal...
Hello All,We are running two VM-500 firewalls in Azure configured in an Active-Passive HA pair. Currently, we are encountering high root partition utilization on both firewalls.A TAC case was opened, and although some files were deleted to reduce disk usage, the root partition utilization remains high. Palo Alto TAC has informed us that to incre...
