Any big issues with preferred release 10.2.10-h9?

Hello. We're preparing to upgrade ~20 firewalls (mix of 800-series and some VM series) to 10.2.10-h9 to address CVE-2024-0012. Wondering if anyone is running 10.2.10-h9 now and how things are working? Any issues with Global Protect? We're heavy users

User-ID and Microsoft Entra ID Internal

We recently setup our CIE to work with our Microsoft Entra ID so when on GlobalProtect, we can track users and their traffic.

We are now looking for solutions for a similar setup for internal users (not on GlobalProtect but on network). We are tryi

New periodic alert: Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform.

Dear all,

since a couple of days I'm getting alerts like:

Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform. Please consider removing unused configuration

I removed all old auto saved configs

Prisma Cloud Certification

Is there anything available to get free discount vouchers or any link to register to get updates on upcoming offers on certification of Prisma cloud (for partners and customers).

prevent-brute-force-attacks

Hello Everyone

I am looking for suggestions on how we could protect our GlobalProtect VPN. We have been seeing people trying to perform brute-force attacks on random user accounts daily. We do have MFA set up, but is there any automation we could i

Secondary FW not sending alerts

Hello,

I have a pa 450 HA set up.

I configured alerts to send an email anytime an administrator logs in or a change is committed. But these are only sending from the primary firewall; if I log into the secondary FW no alerts are sent.

Is there

Log Container Page Only - impact?

Hello,

Has anyone experienced a negative impact from having the "Log Container Page Only" feature checked/turned on?

I ask because of the warning, "If you enable the Log container page only option, there may not always be a correlated URL log ent

Software version 11.1.5 gone?

Now I can not download software version 11.1.5 or 11.1.5-h1 now. what's happen?

xmlapi: query not available

Hi everyone,

I'm trying to get the Prisma Remote Network details via an API call.

From the  Panorama webgui debug page, I'm able to do this... like you see here:

that red line  has all  the information I want with via an API call,

so I tried:

Need assistance with PA-445: general setup/VR

Hello Everyone, I need a little assistance

I am new to Palo Altos...I have just received and trying to set up an PA-445...but I ran into the following issues:

- no incoming traffic hitting on anything (outbound traffic is OK: computers plugged into

Downloaded Firmware from Active Firewall doesn't show up on Passive - PA-460

Hi,

I have downloaded a software release from Active Firewall and already sync to HA Peer, but when we tried to upgrade Passive Firewall. The downloaded version doesn’t show up.

I have also tried uploading the software release manually but it showe

cannot commit as one service keeps shutting down

Can not block x-vpn on port 80

Please can we have some assistance with blocking x-vpn. We currently have

Decryption enabled

DNS proxy enabled

The threats are set to reset/drop/block in screenshots 

Despite all of this, the HTTP-2 connection method in x-vpn successfully establi

How to find active high bandwidth user

If a Palo Alto firewall is experiencing high throughput, what's the best way to find the source user/IP while the high throughput is occurring?

We have all of our security policies set to log on session end, so that traffic log wouldn't help since the