Boot PXE Fog

Hello everyone,

I have a little problem with my boot PXE with Fog server

My station boot on port 69 at the gateway of his network

Fog server and the station they are not in the same network.

I tried to use DNSMASQ but that not resolve the problem

Malicious Hash detected as Adminstrative Hash exception

Hi Team, 

On analysing an ransomware incident, i have block the hash of malicious file and added the file path of malicious file into IOCs. However i can see the alerts for malicious hash in the Critical alert (IOCs based) and Low alert - Administr

CVE ID

Device details : PAN-PA-5060 / Palo Alto

There are 6 CVEs in the advisory.

DESCRIPTION:

CVE-2024-9463: CVSS: 9.9
CVE-2024-9464: CVSS: 9.3
CVE-2024-9465: CVSS: 9.2
CVE-2024-9466: CVSS: 8.2
CVE-2024-9467: CVSS: 7.0
CVE-2024-9468: CVSS : 8.2

Kindly con

Failed to install PanOS_3200-10.2.9-h1 with the following errors

Hi Guys. 

i have PA-3220 need upgrade to 10.2.9-h1.   but failed.  see bellow error msg.   try to reboot .  no luck. and try to downgrade.  also failed.    can someone help for this issue? thanks very much. 

Loading into software manager
Failed to

GlobalProtect expand IP Pool

We have an existing GP setup and it's working, but the IP Pool is set to a range of IPs 192.168.10.10-192.168.10.100 instead of a subnet 192.168.10.0/24.

I want to either expand the range or change it to a subnet.

I tested this by expanding the r

Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com

Getting below alert from the hardware firewall.

"Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com:443"

Followed the below document but no luck.

Do PAN TAC even read the content of the ticket?

This has happened more time than I can count, and I have Platnium support.

I work in the US Eastern time zone 8am-5pm ET and every time when I open ticket with PAN support, I always put in this line at the beginning of the ticket:  "I would like to

show routing route destination output

Hi all,

there is something which is confusing me when I want to check an entry of the routing table.

If I'm looking for an entry of my routing table with:"show routing route destination x.x.x.x/x" and the route is covered by the default route, the outp

Help Allowing VDI Connections

AT&T has provided our users with virtual machines using VMware Horizon Client.  However, when in the office, our users cannot connect to their VDI machine.  However, when external, using our GlobalProtect VPN, they connect successfully.

Error: Load

Doubt about costomize config log paloalto

Hi team

The security auditors ask us if in the Config Log it is possible to have an additional field in the log that links all the events of a rule change with a ticket id external to Palo Alto.

That is to say that in the attached logs an additional

Autocommit loop error and interfaces 'connected but down' after upgrade from 11.0.4-h2 to 11.1.4-h1

Hi All,

I already posted this in "Discussions > Network Security > Next-Generation Firewall Discussions", but I'm unsure if that is the best place for this issue. 

https://live.paloaltonetworks.com/t5/next-generation-firewall/autocommit-loop-erro

questions while creating first IPsec tunnel

We have our egress on Eth1/1 with a public IP assigned by our provider.
We also own a separate public subnet.
We have the internet working and want to add an IPsec tunnel from our PAN to a partner also running PAN.
I'm told to continue using the Eth1

Can't add tunnel interface created by restapi, to Security Zone using restapi.

Using restapi to create IPSec tunnels for a new firewall attached to Panorama. 

I create the tunnel interface using restapi. I can see the new interface successfully created in Panorama. 

When I try to assign that interface to a Security Zone it fail