New Certifications: Next Gen Firewall Engineer and Network Security Professional

So is the Next Gen Firewall essentially the old PCNSE with a few new topics and Network Security Professional similar for the old PCNSA?

And if so can we mostly use corresponding CBT learning for those respective exams?

PAN-OS 12.1, IPv6 and Region/GeoIP

Hi,

With PAN-OS 12.1, IPv6 addresses are now also showing what Region they belong to. However, this seems to be limited to logs. Security policies, using specific regions/countries, will still not match the IPv6 addresses, even though the same IPv6 a

TCP-RST-FROM-CLIENT and TCS-RST-FROM-SERVER

Hi All, 

As captioned in subject, would like to get some clarity on the tcp-rst-from-client and tcp-rst-from-server session end reasons on monitor traffic.

Even with successful communication between User's source IP and Dst IP, we are seeing tcp-rst-

Sectigo Root CA Trusted Store Request

Expired license CDSS

Hello, we received an alert regarding the expiration of CDSS licenses on February 11, 2026, following a change in operation on the Palo Alto side. All our equipment is running at least version 10.2.13-h5. The partner portal does not show any affected

Reason Why Logs Are Received by SLS but Not Stored

In Strata Logging Service, ACTUAL RETENTION DAYS was shown as 0 for certain log types (such as firewall_traffic).

Meanwhile, we observed that system and dns_security logs have increasing ACTUAL RETENTION DAYS.
I understanding is that when ACTUAL RETEN

S2S IPsec VPN with Multiple Domain Encryption

We have experiencing difficulties having more than one domain encryption in IPsec tunnel, specifically when both are in the same subnet. Only one domain encryption remains active in the IPsec phase2. There are few times you can bounce IPsec gateway a

PAN-OS 10.2.11 Device -> Setup page missing

Hello!

I just upgraded my PA-220 to PAN-OS 10.2.11 and the Device -> Setup page is missing. (See attached photo). Has anyone else run into this or is it a browser setting on my PC?

PALO ALTO BACKDATE SUBSCRIPTION POLICY

Could you please advise where we may obtain an official document or website link from Palo Alto Networks that formally states the backdating policy as described below?

Backdating on subscriptions:

• Lapsed Orders placed after the expiration date wit

Network connection unreachable on MAC OS newer version 15.3.2 o higher

Hi All,

PAN-OS version: 11.1.10-h1

GlobalProtect Agent version: 6.3.3-711

We experiencing on the all MAC OS with The connection cannot be established and the following error message is displayed:
“The network connection is unreachable or the porta

Question on PA-440 Failover

Question regarding PA-440 and failover. 

How can I setup a failover in a PA-440 between two physical ports on that PA-440 firewall. For example: If Eth1/7 was connected to a cradlepoint and port 8 was a ipsec tunnel. 

What is the proper way to co