Doubt about costomize config log paloalto

Hi team

The security auditors ask us if in the Config Log it is possible to have an additional field in the log that links all the events of a rule change with a ticket id external to Palo Alto.

That is to say that in the attached logs an additional

Autocommit loop error and interfaces 'connected but down' after upgrade from 11.0.4-h2 to 11.1.4-h1

Hi All,

I already posted this in "Discussions > Network Security > Next-Generation Firewall Discussions", but I'm unsure if that is the best place for this issue. 

https://live.paloaltonetworks.com/t5/next-generation-firewall/autocommit-loop-erro

questions while creating first IPsec tunnel

We have our egress on Eth1/1 with a public IP assigned by our provider.
We also own a separate public subnet.
We have the internet working and want to add an IPsec tunnel from our PAN to a partner also running PAN.
I'm told to continue using the Eth1

Can't add tunnel interface created by restapi, to Security Zone using restapi.

Using restapi to create IPSec tunnels for a new firewall attached to Panorama. 

I create the tunnel interface using restapi. I can see the new interface successfully created in Panorama. 

When I try to assign that interface to a Security Zone it fail

Veeam Server high CPU Cortex XDR

Hello,

We have a server with Veeam Backup, and we are noticing high CPU usage from Cortex.

We have seen that some exceptions might need to be applied:

https://www.veeam.com/kb1999

Would this apply to Cortex?

Best regards.

Migrate the active directory services from onpremise to EntraID (Azure),

Hello team

We want to migrate active directory services from onpremise to EntraID (Azure), how can we integrate the UserAgent in Palo Alto?

Greetings

Fuel Workshop on GlobalProtect Large Scale VPN (LSVPN)

Fuel Workshop on GlobalProtect Large Scale VPN (LSVPN)

Welcome to the next in our series of Fuel Workshops where will be covering the implementation of GlobalProtect for Large Scale VPN (LSVPN).  Our speaker, Siddhant Chawla, Senior Technical Sup

Supporting multiple customer accounts with one e-mail-ID

Hello, I work for a hardware reseller supporting many of your Palo Alto customers. My colleague's and I have our e-mail IDs tied to only one of our (and your) customers accounts. We are finding it difficult at best to open cases and support our other

PAN-262287

I was just discussing the with PA TAC - PAN-262287 - PA TAC mentioned they have an internal bug which sug

PAN-OS Certificate expiration

Hi All,

i have question on the following article : 

https://live.paloaltonetworks.com/t5/customer-advisories/update-to-additional-pan-os-certificate-expirations-and-new/ta-p/572158.

My panorama version is 10.2.10 and my userid agent is on 10.2.

New periodic alert: Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform.

Dear all,

since a couple of days I'm getting alerts like:

Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform. Please consider removing unused configuration

I removed all old auto saved configs

Not able to connect Global Protect VPN on IPAD device

Hello Friends,

We have a customer who is not able to connect Global Protect VPN from IPAD device with error "could not verify the server certificate of the gateway" I revived the configuration and selected connection method as on-demand in the app

VPN tunnel question…

Hello,

I am trying to find out the logic about this scenario.

If we have an ikev2 tunnel, and only a single /32 route in the routing table to reach the tunnel peer (assume dynamic routing for encryption domain), and for some reason that route get