Global Protect

Entered the credentials, got the push. Gp is showing connecting and after 2 sec showing not connected and minimizes the agent. Exactly after 5 sec agent pops up.. Started spinning and gets connected.(Without asking for credential and push mfa) Version :6.1.0

OOM-Killer on 8.1 Trail (PA-5050 device)

Hi, i know this is about old software on old hardware, but both are still supported by Palo Alto. In the last months we get a heavy amount of OOM Message / Stack Traces / you name it. Actually we arent able to push new config changes from Panorama to the both devices. Everytime the commit will be aborted by some OOM activities and mostly the M...

Can Applications be filtered in some way in Cortex XDR report?

Hello all! I hope your day is going well!I wanted to know if Cortex XDR has the availability to filter applications in a report?What my goal is : For example I have 20 systems. Is there any way that I can put a filter on them, to see what Applications those systems have?For example, this is now happening with Groups. I can see what groups are as...

Creating a support case forwards me to LIVE community

Hello, We have a Panorama premium support and recently trying to create a TAC case and request for engineer on the support portal. But recently we are unable to create one and instead recommend us to use the LIVE community. is there still a way we can create a support ticket and set a call with a TAC engineer? for your advice.

Inquiry about API key

In order to receive the Palo Alto Firewall api keyI checked " curl -k -X GET 'https://<fw-ip>/api/?type=keygen&user=<id>&password=<password>' " in the docsbut where is this command have to enter it? https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-panorama-api/get-started-with-the-pan-os-xml-api/get-your-api-key

Count Palo Alto Memory Usage

Hello All, I want to ask about memory on PA-850 and PA-3410. i use the calculation "Free Memory/Total Memory = xxx %" and the rest i assume is the used memory but when i see the memory utilization on PA-3410 its only have 210MB for free memory. so when i use the calculation, the free memory only 1% from the total memory, it has a large numb...

mdns forwarding between vlans no option

hi guys how can I enable mdns forwarding between l3 vlans (my ports are essentially l2 bridges into groups with l3 vlan interfaces having ips and running dchp servers) it seem like bonjur forwarding can only be enabled on physical l3 and not l3 vlans not quite sure what to do thank youalex

Hi, a Windows 10 with agent 7.9.1.26645 can´t upgrade windows after agent installation.

Collecting customer deployment information

Given I am a newbie to Palo, I am running through the PSE Strata Associate training and have seen this statement (or something like it) many times : using intelligence generated across many thousands of customer deployments. This prompts a few questions: 1. What is being sent from these customer deployments for this analysis to be done ? 2....

IKE phase 1 not working

I'm trying to setup a site-to-site VPN between Palo 820 and a Cisco ASA. I've checked the configs and both are matching OK with correct PSK. I've configured the proxy IDs accordingly. I don't have access to the Cisco ASA as this is on the customer side however they sent me the config so I can confirm that crypto settings, psk are matching. T...

Symmetric Return Details - DNAT - PBF Out or PBF In return Symmetric

Symmetric Return Details - DNAT - PBF Out or PBF In return Symmetric Hello Live Community, good evening, as always, thanks for the good vibes, the collaboration and your time. One doubt, I have managed to validate this behavior associated to environment, with two or three ISP Internet links, when I point 2 DNAT to the same IP. And of course ...

3CX PBX behind a PAN-500

After about a week of trial and error, the Palo Alto Network engineers have told me that my PAN-500 does not support the 3CX phone system. I am told that a future feature request will resolve flow based NAT issue I am having with STUN traffic. Unfortunately, I have already bought the server and all new IP phones and the changeover is 2 weeks awa...