Certificate Expired Warning in Deploy but all certificates are good

The Sub CA Certificate of our old internal PKI expired a few days ago. It didn't have any impact and wasn't a security risk, but today i cleaned everything up.

Problem is, i still get a warning on one of our firewalls.

• Certificate %redacted% in sha

Management Interface Settings - Can't Change?

Got a weird one here, I'm using templates from Panorama but I have one firewall, in an HA pair, that has Telnet enabled on the Administrative Management Services section and it should be set to OFF per my template.  The interface is showing "Template

cannot commit as one service keeps shutting down

Log Container Page Only - impact?

Hello,

Has anyone experienced a negative impact from having the "Log Container Page Only" feature checked/turned on?

I ask because of the warning, "If you enable the Log container page only option, there may not always be a correlated URL log ent

Blocking unknown devices that are not within the domain

Hello everyone,

I am a Palo Alto PA-450 user. In our organization, we removed around 20 computers from the domain due to their outdated versions. However, these computers continue to log in using the credentials of the last user who logged in while t

OpenConfig automatically installed with 10.2.11-hx upgrade

We installed 10.2.11-h6 on a pair of virtual firewalls and the OpenConfig plugin was automatically installed and a new Device Administrator user called __OpenConfig was added. Is this documented anywhere? I can't find it. 

And why do I need this plug

Getting Inbound connections from Malicious Palo Alto IP

Hello all,

I've recently detected inbound traffic from an IP address 147.185.132.201 where the ISP is showing as Palo Alto Networks, Inc. 
The IP has a malicious reputation over VT, AbuseIPDB, and IPVoid.

Can anyone with information about this IP addre

Unable to open TAC cases due to mandatory TSF file upload requirement

hi guys, 

I am trying to open a TAC case in PA portal, however it seems there is latest change happen which requires a TSF file upload mandatory.

SInce we are a restricted site, we cannot share or upload anything on the portal. Because of this issue,

Sync firewalls with Panoram

if I configured the firewall interfaces locally first, then imported the firewall into panorama, the firewall interfaces would display in the Panoram with a little icon.
How about the interfaces I  configured after the firewall is imported into Panora

prevent-brute-force-attacks

Hello Everyone

I am looking for suggestions on how we could protect our GlobalProtect VPN. We have been seeing people trying to perform brute-force attacks on random user accounts daily. We do have MFA set up, but is there any automation we could i

Can not block x-vpn on port 80

Please can we have some assistance with blocking x-vpn. We currently have

Decryption enabled

DNS proxy enabled

The threats are set to reset/drop/block in screenshots 

Despite all of this, the HTTP-2 connection method in x-vpn successfully establi

User-ID Connection Security Won't Work

UserID Agent version 9.0.5-8
Firewall 9.0.8

Windows Server 2016 UserID Agent Servers x2

I've tried following this guide and numerous others (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGFCA0)

Keep getting 'Failed to vali

Prisma Cloud Certification

Is there anything available to get free discount vouchers or any link to register to get updates on upcoming offers on certification of Prisma cloud (for partners and customers).