XDR Certification - new version

Has anyone started the new Cortex XDR Analyst certification

I have seen some information related to the exam, but in the past there were training videos available to help with preparation.

At the moment, to prepare for the exam, do we need to com

GlobalProtect Always-On (6.3.3-c711) – Users Stuck in “Connecting” State but Still Have Internet Access

Hello everyone,

We are running GlobalProtect 6.3.3-c711 in an always-on architecture for our end users.

Our setup is as follows:

• Always-On enabled

• Full tunnel configuration (all traffic routed through GlobalProtect)

• Portal → App settings → Restora

Windows Clients – Captive Portal Not Triggering with GlobalProtect Always-On Enabled

Hello everyone,

We are using a Captive Portal on our Palo Alto firewall at the headquarters. When users enter the building and connect to the wireless network, a Captive Portal pop-up is presented, and users gain internet access after entering their

PA-440 to PA-1410

I have a PA-440 running PAN-OS 10.2 and a target PA-1410 running PAN-OS 11.4.7-h1.
I would like to export the configuration from the PA-440 and migrate it to the PA-1410 without upgrading the PA-440.

every time i import the PA-440 config to the 1410

Discussion Forum Analysis

Is there an easy way to analyze discussion forum interactions in a given timeframe without going page by page to painstakingly collect data points? I have tried Gemini but my test time periods are never correct. Any suggestions would be welcome. 

Does Palo Alto plan to offer on-prem versions of the DLP, OT discovery and Strata Cloud Manager for data sovereignty?

As data sovereignty becomes a big issue for some customers palo alto has great features but some like DLP, OT discovery and Strata Cloud Manager are only SaaS based.

My question is does Palo Alto plan to offer on-prem versions of the DLP, OT discov

Duo SSO With GlobalProtect Client Connection Not Getting Established

I’m encountering an issue with our GlobalProtect VPN setup, which uses LDAP for user authentication and DUO SSO for multi-factor authentication (MFA). The process works as follows:
1. Users launch the GlobalProtect application.
2. They are prompted to

Excel downloads being blocked

In the last couple of days we've been getting reports from multiple users that they are being blocked from downloading .xlsx files from a cloud service. 

I can see that there are multiple entries in the Data Filtering log for each file, and then fi

TAP interface questions

I'd like to monitor a portion of my network on my failover PA in TAP mode.

Will this affect my HA pair at all? 

Is it possible to set up an aggregate TAP of 2 ports?

thanks in advance...

PA-415-5G not working with fresh T-Mobile SIM

Hello yall!

I am currently having trouble getting my PA-415-5G working with a new T-Mobile sim. I have the "Bus Int Unl Elig BYOD" plan. I see that the firewall can recognize the sim card, but it gets stuck on the:

Registration State : Searching
Acti

Source user not showing in traffic logs

I have the agentless user-id configured in my PA-500, software is 5.0.4.  If I do a "show user ip-user-mapping all", it retrieves a list of usernames.  However, in my traffic logs (which is currently only limited to a few machines that are running th

Concern Regarding Inclusion of Open-Source Projects in "Shareware and Freeware" Category in Advanced URL Filtering

Hello Palo Alto Community,

I am writing to raise a concern regarding the categorization of websites under Palo Alto Networks' Advanced URL Filtering. Specifically, I have noticed that sites providing access to open-source projects (such as Github,