PAN-GPLimiter: Limit Concurrent GlobalProtect Sessions/Connections Per Unique User

PAN-GPLimiter: Limit Concurrent GlobalProtect Sessions/Connections Per Unique User

Hi All,

I would like to introduce my Go program for limiting concurrent remote user logins in a single GP Gateway on a PAN-OS Firewall.
(Keywords: Limit the maximum

Global Protect Version on firewall

What command can I use to display the global protect version on a palo alto firewall.

Unable to Log Into Customer Support Portal

Hello.

I just made an account with Palo Alto. I'm trying to get access to the IOS files for my company's Palo Alto devices to get them updated.

When I try to access the Support Portal, I get an "unexpected error," which directs me to customer sup

log rotation alarm in the Panorama?

Hello community!

The firewalls generate an alarm when certain % of the log quota is reached:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClktCAC

In Panorama you don´t have those alarms. In a Panorama-VM Logs are purg

GlobalProtect expand IP Pool

We have an existing GP setup and it's working, but the IP Pool is set to a range of IPs 192.168.10.10-192.168.10.100 instead of a subnet 192.168.10.0/24.

I want to either expand the range or change it to a subnet.

I tested this by expanding the r

Export Codes - HS/ECCN/CCATS

Hi, 

I'm looking to obtain the export codes for some Palo Alto Network products.  Can anyone point me in the right direction to obtain these?

Thankyou, 

How to limit concurrent GlobalProtect connections per user

Hi communit

So far it isn't possible to limit the concurrent GlobalProtect connections per user directly in PAN-OS. There is a feature request #4603 for which you can vote and wait/hope that this will be implemented.

If you need a solution (worka

XDR CLEANER 8.5.* STUCK not working

XDR CLEANER not working stuck have tried rebooting system also not working any other way to remove XDR other than cleaner, removing from appwiz.cpl

Boot PXE Fog

Hello everyone,

I have a little problem with my boot PXE with Fog server

My station boot on port 69 at the gateway of his network

Fog server and the station they are not in the same network.

I tried to use DNSMASQ but that not resolve the problem

Malicious Hash detected as Adminstrative Hash exception

Hi Team, 

On analysing an ransomware incident, i have block the hash of malicious file and added the file path of malicious file into IOCs. However i can see the alerts for malicious hash in the Critical alert (IOCs based) and Low alert - Administr

CVE ID

Device details : PAN-PA-5060 / Palo Alto

There are 6 CVEs in the advisory.

DESCRIPTION:

CVE-2024-9463: CVSS: 9.9
CVE-2024-9464: CVSS: 9.3
CVE-2024-9465: CVSS: 9.2
CVE-2024-9466: CVSS: 8.2
CVE-2024-9467: CVSS: 7.0
CVE-2024-9468: CVSS : 8.2

Kindly con

Failed to install PanOS_3200-10.2.9-h1 with the following errors

Hi Guys. 

i have PA-3220 need upgrade to 10.2.9-h1.   but failed.  see bellow error msg.   try to reboot .  no luck. and try to downgrade.  also failed.    can someone help for this issue? thanks very much. 

Loading into software manager
Failed to

Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com

Getting below alert from the hardware firewall.

"Failed to establish GRPC connection to AceMlc2 service: failed to start grpc connection with address ace.eu.hawkeye.services-edge.paloaltonetworks.com:443"

Followed the below document but no luck.

Do PAN TAC even read the content of the ticket?

This has happened more time than I can count, and I have Platnium support.

I work in the US Eastern time zone 8am-5pm ET and every time when I open ticket with PAN support, I always put in this line at the beginning of the ticket:  "I would like to

show routing route destination output

Hi all,

there is something which is confusing me when I want to check an entry of the routing table.

If I'm looking for an entry of my routing table with:"show routing route destination x.x.x.x/x" and the route is covered by the default route, the outp