Blocking unknown devices that are not within the domain

Hello everyone,

I am a Palo Alto PA-450 user. In our organization, we removed around 20 computers from the domain due to their outdated versions. However, these computers continue to log in using the credentials of the last user who logged in while t

Getting Inbound connections from Malicious Palo Alto IP

Hello all,

I've recently detected inbound traffic from an IP address 147.185.132.201 where the ISP is showing as Palo Alto Networks, Inc. 
The IP has a malicious reputation over VT, AbuseIPDB, and IPVoid.

Can anyone with information about this IP addre

Sync firewalls with Panoram

if I configured the firewall interfaces locally first, then imported the firewall into panorama, the firewall interfaces would display in the Panoram with a little icon.
How about the interfaces I  configured after the firewall is imported into Panora

Panorama software download issues

Having two issues while attempting to upgrade Panorama from 10.1.13 to 11.1.5;

1) On the primary Panorama VM, try to preload all the versions for each step of the upgrade like we do on a firewall. The new version, say 10.2.0 seems to download properl

Unable to open TAC cases due to mandatory TSF file upload requirement

hi guys, 

I am trying to open a TAC case in PA portal, however it seems there is latest change happen which requires a TSF file upload mandatory.

SInce we are a restricted site, we cannot share or upload anything on the portal. Because of this issue,

PAN Firewall process running every hour

Hi All,

I wanna ask about What processes are there in the PAN firewall that run hourly?

such as Process that can be checked
1. Signature update
2. Automated Report
3. Alert system that appears every hour

Thanks & Regards

NGFW 

prevent-brute-force-attacks

Hello Everyone

I am looking for suggestions on how we could protect our GlobalProtect VPN. We have been seeing people trying to perform brute-force attacks on random user accounts daily. We do have MFA set up, but is there any automation we could i

Can not block x-vpn on port 80

Please can we have some assistance with blocking x-vpn. We currently have

Decryption enabled

DNS proxy enabled

The threats are set to reset/drop/block in screenshots 

Despite all of this, the HTTP-2 connection method in x-vpn successfully establi

User-ID Connection Security Won't Work

UserID Agent version 9.0.5-8
Firewall 9.0.8

Windows Server 2016 UserID Agent Servers x2

I've tried following this guide and numerous others (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0)

Keep getting 'Failed to vali

Prisma Cloud Certification

Is there anything available to get free discount vouchers or any link to register to get updates on upcoming offers on certification of Prisma cloud (for partners and customers).

How to find active high bandwidth user

If a Palo Alto firewall is experiencing high throughput, what's the best way to find the source user/IP while the high throughput is occurring?

We have all of our security policies set to log on session end, so that traffic log wouldn't help since the

what is the latest recommended stable PAN-OS version ?

Hi All,

Can you please suggest latest recommended stable PAN-OS version and panorama.

we need to upgrade all the PAN-OS with latest stable version.

please suggest 

New periodic alert: Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform.

Dear all,

since a couple of days I'm getting alerts like:

Configuration size 19MB is above 80% of the maximum recommended configuration size 23MB for the platform. Please consider removing unused configuration

I removed all old auto saved configs

Custom report emails blank??

I have 4 custom reports that if I 'run now' they display relevant information.  But once I put them in a group and scheduled them to email/run everynight they come through blank with the message 'There is no PA-report-01 report on Sunday, Mar 18.'   

User-ID and Microsoft Entra ID Internal

We recently setup our CIE to work with our Microsoft Entra ID so when on GlobalProtect, we can track users and their traffic.

We are now looking for solutions for a similar setup for internal users (not on GlobalProtect but on network). We are tryi