Brute Force Attack protection on GlobalProtect Portal Page isn't getting triggered

- We have a  Vulnerability Protection for threat ID 40017 SSL VPN Authentication Brute Force Attempt in place.

- With default Time attribute as 10 hits per 60 seconds, action as Block IP and have called in the security policy but it is not being trig

Global Protect Client Install

I have a Google Shared Drive in my organization's Google Workspaces with all of the various GPVPN client installation files (Windows, Linux, MacOS, Android).  I would like to automate a quarterly replacement of each installation file with the latest

Wait time

What's up with the horrendous wait time to speak to a tech regarding a case?  Been on hold for over two hours.

"IP Tag" Log

Does anyone know what the "IP Tag" log is exactly used for? I know its related to dynamic address objects but what is the log used for?

Getting Inbound connections from Malicious Palo Alto IP

Hello all,

I've recently detected inbound traffic from an IP address 147.185.132.201 where the ISP is showing as Palo Alto Networks, Inc. 
The IP has a malicious reputation over VT, AbuseIPDB, and IPVoid.

Can anyone with information about this IP addre

Certificate Expired Warning in Deploy but all certificates are good

The Sub CA Certificate of our old internal PKI expired a few days ago. It didn't have any impact and wasn't a security risk, but today i cleaned everything up.

Problem is, i still get a warning on one of our firewalls.

• Certificate %redacted% in sha

AIOps page is showing blank

Anyone experiencing slow websites with PANOS patched for CVE-2024-0012/CVE-2024-9474?

Is anyone else experiencing intermittent slow website access with the recent hot patches for CVEs? Currently running 10.2.9-h16 and having intermittent issues with some websites, some users, while others have no issues. I can't find anything in the P

OpenConfig automatically installed with 10.2.11-hx upgrade

We installed 10.2.11-h6 on a pair of virtual firewalls and the OpenConfig plugin was automatically installed and a new Device Administrator user called __OpenConfig was added. Is this documented anywhere? I can't find it. 

And why do I need this plug

VM series log not detected in Azure Sentinel

Here’s the problem statement:

1] If Syslog UDP 514 is configured in PAN FW on-prem and vm-series, There were missing logs in AZ Sentinel, Incomplete logs is experienced and there were packets fragmentation.

2] MS Sentinel support recommended to change

DHCP Relay - Users unable to get IP address until I delete and re-add the servers

There are plenty of IP addresses and not that many users, and sometimes the users are unable to get an IP address, but when I delete and re-add the servers in the DCHP relay, they are able to get IP addresses again, this happens frequently on and off