This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Issue with GP Access for JIO Users on PA-820

Dear Friends, One of our customer is facing an issue with users on PA-820. According to the customer, many users are connecting to the internet via mobile hotspot using JIO SIM cards. While they can successfully connect to GlobalProtect, but they are unable to access internal servers.This issue is specific to users who are using JIO SIM cards ...

Resolved! Warning: External Dynamic List XXX is configured with no certificate profile

Hi all, I've been following this Article but I've run into an issue. When I try to edit an existing EDL and assign the Certificate Profile I created, the dropdown only shows "None (Disable Cert profile)" — the new certificate profile isn't listed as an option. However, when I create a brand new EDL, the certificate profile I created is available...

MaratP by • L1 Bithead
  • 1276 Views
  • 3 replies
  • 0 Likes

Site to site VPN between PA & Azure || Failover / HIgh availability

We have configured two Site-to-Site VPN tunnels between our Palo Alto firewall and Azure VPN Gateway to provide redundancy and high availability. However, we are encountering an issue where we are unable to keep both VPN tunnels active simultaneously: When both VPN tunnels are up, connectivity between our on-premises environment and Azure becom...

Resolved! Network wifi Management

Please, I'm very new to the field of networking but I need help. How can you manage your wifi network. By allowing a certain set of people to have access and blocked the rest. Even if they all have access to the WiFi password?. I really do need help on it. We're all on the same network but needs to block some set of people and let some set of...

GlobalProtect is no longer able to retrieve information for Trend Micro Apex One Security Agent

We are experiencing an issue where GlobalProtect is no longer able to retrieve information for Trend Micro Apex One Security Agent. As a result, our HIP Objects that rely on this product are no longer matching correctly, and we cannot enforce the related security policies. Everything was working as expected until 17 June 2026, when the issue app...

Humps and bumps with the Palo Alto firewall integrated User-ID agent and Active Directory.

Introduction The User-ID agent links an IP-address to a user account. It enables identifying your users so that they show up in the logs and you can use them in rules. One can choose between the integrated agent or install the Windows edition. Problem with the Windows variant is that it is currently unsupported with Windows Server 2022 domain co...

HanValk_0-1660636016659.png
HanValk_1-1660636016665.png
HanValk_1-1660657852200.png
Han.Valk by • L2 Linker
  • 14739 Views
  • 6 replies
  • 14 Likes

NFS sessions undecided after fail-over

Situation:NFS Client src:828 dst: 2049 --> PAN 7050 HA Cluster --> NFS Server (NFS Session is up and connected without issue) Palo alto cluster fail-over occurs (upgrade/issue - doesn't matter) NFS Client src:828 dst:2049 -->PAN (Session is marked as "undecided" and dropping the syn packets)The timer continues to reset on the session on...

Palo Alto device is wrongly directing the traffic . DUAL ISP IPSEC VPN issue

we have two dynamic ISP in single VR with ECMP and we have setup dual IPSEC VPN tunnels towards single public IP to other paloalto . our issue that PA wrongly forwarding traffic , ISP 2 is using MAC address of ISP1 when initiating VPN traffic to public ip address of second FW. Moreover check the source MAC address ! show interfa...

mhm_ameen_1-1662458236401.png

URL FILTERING

Hello Team, i cannot block website torrent like cpasbien, torrent9. even i use url filtering. My license is okay

K.BAKARY by • L1 Bithead
  • 273 Views
  • 4 replies
  • 0 Likes

Request the Change boot mode feature will work on GUI

Dear Palo Alto, I cannot change ZTP to Standard mode on GUI, it is not working, so i have to access to CLI to prompt "set system ztp disable" to change mode. I don't understand why Palo Alto doesn't make this feature work on the GUI even though there's a menu displayed. I think the development team should consider implementing this feature s...

Issues with connectivity between HA PAs and Nexus Leaf Switches

I've inherited a setup which has PAs with two vsys each connecting:external switch/router > PA external vsys > A10 Load Balancers > PA internal vsys > Cisco Nexus Leaf switches We run a full mesh setup (1x interface from each side of the PA HA pair to each (upstream switch, external A10, internal A10) internal device, both primary an...

rmeskill by • L0 Member
  • 138 Views
  • 1 replies
  • 0 Likes

Terminal Server Agent issues with CCH Engagement

Hi everyone, we recently deployed Terminal Server Agents on our AVD Hosts. We're having issues with about 3-5 users that use CCH Engagement. Users would get the below errors when trying to open binders: We also increased the minimum port allocation size from 200 to 500 and changed the source port allocation range to 25000–45000. From our obs...

RPerez481389_0-1784765718878.png
RPerez481389_1-1784765772928.png
  • 24422 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks