Modified XML API for Top Users last 30days

Hi Support, We want to get top all users for last 30 days using XML API, how we get it? This is XML API to get top 10 users (Worked😞 <type><panorama-trsum><sortby>sessions</sortby><group-by>srcuser</group-by><aggregate-by><member>src</member><member>app</member></aggregat...

what is the steps for SIEM integration in PA firewall

Security policy with sources on a CDN or domains with wildcard

Hello to all, I would like to know how smart PAN admins would solve this problem: suppose you have to allow inbound traffic from a source address that is: - defined as a FQDN but you know from DNS that it is delivered via a CDN like cloudflare, akamai, etc or - defined as a domain with a wildcard, for example *.letsencrypt.org I know that: - I...

dynamic update fail 8786-8435

Hi, Please advise if anyone face issue fail dynamic update for version 8786-8435. There are no any update for this and no error in paninstaller_content showed. I saw disk for pan config is only 33%. Anyone know what we can check more? Schedule update everyday 10PM SGT but last update is 2021/09/01. there are internet connection on firewall.

Panorama push errors None after upgrade

We recently had this issue where after upgrading firewalls to 10.1 the panorama gave a error on push to certain firewalls with description "none" which wasn't very helpful. On further process eliminating we discovered it was only VM FW's in AWS the error occurred on. Panorama wouldn't even try to push the device templates or give any meaningfu...

Handling of and Awareness of APP-ID shifts or new releases

I'm not sure how much it's been publicized, but there's a pretty significant improvement to how Palo is letting customers handle newly released APP-IDs or application shifts. Thus far when new app-ids are released customers just have to accept them without really understanding if the coming change will effect existing security policy. Well fi...

Monitoring the firewall

Hello, i would like to monitor the firewall using centreon. Unfortunately we are using the free version so we dont have access to the snmp and ssh plugins packs and we have to do everything by ourselves. To get CPU, uptime information and so on i can use snmp using OID. However to get more detailled informations i would like to run ssh comma...

Tunnel Monitoring

Hi Team, I wanted to setup Tunnel Monitoring for the Dynamic IPSec tunnels. Peer end IPs are dynamic, we have around 5 to 6 VPNs that we need to monitor. I was going through the SK where it says for Tunnel monitoring, we need to have IP address configured on the tunnel interface used for the VPN. And even the Tunnel interface IP can be any dummy...

System Log Events

Does anyone know if there's a list of all the events that get logged to the firewall System Log? If so, could you please point me to it? The Administrators Guide refers to this list however, I cannot find it. Kind regards,Jeff

IPSec Phase 1 tunnel not connecting

Hello Everyone, Need your support to fix a FW to FW PA IPSec Phase 1 tunnel not connecting. I have checked the setting with the vendor and configuration is same at both the ends. Below are the debug logs from PA 2023-11-30 14:30:40.000 +0400 [DEBG]: { 3: }: 180 bytes from 5.41.58.98[500] to 215.70.10.151[500]2023-11-30 14:30:40.000 +0400...

Required PAN-OS 8.1.25-h1 for PA 3060

Hi, As per the advisory https://live.paloaltonetworks.com/t5/customer-advisories/emergency-update-required-pan-os-root-and-default-certificate/ta-p/564672 customer need to upgrade the PA 3060 from version 8.1.15 to 8.1.25-h1 or greater but i'm unable to see image 8.1.25 in firewall download section neither available on PA Support portal. Is 8....