Inquiries about PBF nexthop settings when the ISP is a DHCP Client

1. Issue: PBF does not operate normally when the public IP received from the line is a dynamic IP

2. Measures
- If the circuit IP is a static IP, check the normal operation by inserting the gateway into the PBF – Nexthop setting
- If the line IP is a d

Understanding URL Filtering security profiles vs Rule Action

Hi!
I have a pretty basic question that I couldn't find the answer to - am hoping that someone could help me understand this.

Let's say I have a security rule:

Rule 1: src=192.168.1.0/24, Dst=192.168.2.0/24, Svc=Any, Action=Allow, Security Profile=A

Cortex XDR: How to block execution of some unwanted apps

Hello All,

We have observed some unwanted applications( Any desk, WhatsApp) used by end users in customer environment. Is there any way apart from blocking the hash present in cortex console which will block the execution of such files.

Thanks in

When logging into the community can I turn off the email a code?

Whenever I want to log into the palo alto networks community, it asks to email a code to my email address.  Sometimes I think it already did but nothing came, but in reality I never clicked the button to send the email.

Is there a way to turn that of

Day 1 Configuration of PAN-410 model firewall

I created day 1 config file for my PA-410 model firewall and loaded the configuration. But while commiting Got below error:

"email-scheduler -> Possible Compromise -> report-group 'Possible Compromise' is not a valid reference
email-scheduler -> Possi

Device Control Violations

how to download Device Control Violations  data from the cortex

Enable Device Telemetry with error message : Send File to CDL Receiver Failed

Hello,

I have PA VM100 with PAN OS 10.2.2. Enabling Telemetry  and setting up the Telemetry Region as Americas. The status for Device, Product and Threat is always "Failed" with message "Send file to CDL Receiver Failed"

Any advise, suggestion or h

GlobalProtect Machine account exists with device serial number config

Dear Team,

I'm trying to set up GlobalProtect's 'Serial Number Check' feature, but I'm having a hard time.

GlobalProtect is already being used in conjunction with LDAP.

So, when I do not use the function, I log in normally.

I want to control

I have a Premium Account but can figure out how to open a trouble ticket... the Portal Changed PLEASE HELP... So frustrating...

Strange behaviour via Palo Alto Firewall.

Could someone explain why this site would fail via our firewalls, it works fine local and split tunnel. I would imagine it's to do with encryption levels as wireshark shows a few cypher spec changes during the handshake..

FYI.... SSL Proxy / decrypti