Help finding partial config diff API

I'm working on an integration to segment access to the Panorama feature to review audit comment messages and partial config diffs for policies.  In Panorama, if you navigate to Policies -> <select a policy> -> Audit Comment Archive, there are three p

Tunnel is down due to packet sending failure.

I have a user who is getting disconnected every 1 hour. checking the logs I see the the error message "Tunnel is down due to packet sending failure"  is there any documentation as to why some one would get this error message.

Global Protect agent background is invisible on some external displays

We've recently gotten reports of two different Macbook Pros running Sonoma with external displays where the GP agent background is invisible / transparent.  The app seems to be working fine, but on certain external displays, it's difficult to use bec

.csv format change

Hi,

I've just noticed this recently. A while ago when I added .csv file to a report, it was formatted with coma between columns. Now it is using a tab what cusses export to Excel more difficult. Is any setting which can be use to change it back? 

Question above Forward Proxy Decryption implementation

Greeting all,

I've tinkered with Forward Proxy Decryption a bit in the past and I want to revisit this for a limited rollout to our servers at least.  My previous experimentation into the feature was for a Windows client so I understand the basics

Meet the New Ruggedized PA-400R Series

Blog written by Rich Campagna.

Three New Ruggedized Firewall Platforms Extend the Palo Alto Networks’ Hardware Portfolio into Remote and Harsh Environments

Today, we’re pleased to announce the PA-400R Series, three new ruggedized ML-Powered

WEBUI Session Timing Out

Hello,

On my PA-820 I started getting the idle timeout message below:

"Your login session has expired and you have been logged out for security reasons. Please log in again if you wish to continue."

Normally this was never an issue and I simply logge

Intermittent inet connectivity after updating to 10.2.8-h3

We're currently running on 10.2.3-h9 (PA-440's in HA pair Active/Passive) with remediation steps put in place for CVE-2024-3400 and Telemetry disabled. 

We attempted to migrate to 10.2.8-h3 as it is listed as a preferred release and fix for the CVE a

Cloud Identity Engine - Multi Auth Profile

Hello All . 

Have a very simple thing I am trying to do but as ever things are not so simple with Palo . 

I'm using Prisma SASE  and this focus around this question is Cloud ID Engine & Global Protect. 

WE are AAD only with no on premise resources

Looking for a XQL query to identify if a specific domain is accessed in our environment.

I have tried using the below XQL query to identify the domains accessed and tried to test it using my own system but somehow I am not getting all the results. For eg : when I tried common domain names like "google.com", "reddit.com". It worked and fe

Paloalto TLS/SSL error while forwarding logs over TLS Syslog

PKCS12 Certificate  and Password generated from Paloalto is used at syslog server to establish connection between both system and used to decrypt the logs. However after establishing the connection the ssl handshake is broken and we see below error.

GP -> SAML -> EntraID Windows users vs Mac user experience issues

Got a weird one and I'm on Mac so short of pestering my colleagues reaching out to the greater community while I wait on support to attempt to triage.

GP client 6.2.3 - PAN 11.1.2

GP setup;

• using default browser to support our yubikey users
• using

URL Filtering Lookup Site Hosting

Has anybody noticed if the location of the Palo Alto URL Filtering test site has moved?

We were previously able to use this to lookup classifications of URLs, but recently we have not been able to.

Our geo-blocking policy prevents our traffic going o