General Topics

OID for check proxy

Hi team
We need a check check for the Palo Alto Firewalls that alerts in case of not having synchronization with the Proxy.

In case of not synchronization, alerts appear and can be viewed in: Monitor > System > '(subtype eq 'url-filtering') and !(seve

Cortex XSIAM API to get available custom fields in incident

We have an api to update an incident, in it we can also set values for the custom fields we created in the UI.

POST
https://api-<fqdn>/public_api/v1/incidents/update_incident

BODY
{
"request_data": {
"incident_id": "<incident_id>",
"update_data": {
"field_1

How to Audit whitelist URL

We have around 1,000 whitelist URLs in Palo Alto. How can we audit these URLs and determine which ones are active

PA-200 upgrade steps

Hi All,

New to PA firewalls and have an old EOL PA-200 running PanOS5.0.6

I would like to upgrade to 8.1.26 but every upgrade attempt fails from the GUI or CLI

I downloaded PanOS 6.0.0 and 6.0.15 but it also fails requiring content version 401

GlobalProtect prelogon and internal gateway detection

I've been doing mixes of internal and external gateways with customer forever (I usually forget that "always-on" must be enabled for internal gateway detection to even be allowed in the first place).

I'm working on a pre-logon implementation that a

Best method to permit SAML auth and Radius for Globalprotect at the same time?

Greetings all, I hope you can help me. 

I currently have Globalprotect set up on a single firewall - both portal and gateway.  We're using Radius for authentication, it is working well. 

We want to transition to SAML.  For testing purposes, we'd like

REQUEST: Grace period for GlobalProtect patch checking

Problem:

Because of occasional issues with vendor patches, like MS had early this year, (see URL below), very few companies release patches/updates to clients or servers on the day of release. They test the updates first, then release them days or ev

PROTIP: Factory Reset from MacOX

tl;dr use the command "cu" instead of "screen".

I have been trying to factory reset a PA-3200 for about 45 minutes.  I am using a standard RJ-45 to DB9 serial cable with a USB serial adapter.  Following the instructions I get to the step where I ha

DNS sinkhole

Hello everybody,

How many policy we need for block and review source of infected hosts?

One or two?

Internal dns is using but we can not see source of users.