Does Panorama 11.1.8 supports Azure VM series Palo Alto of any version? We're planning to have same version as Panorama for Azure VM series.
Running 10.1.6-h3 and in Panorama I go to objects, regions and click add but it won't let me add an IP Address. We only allow US traffic using a deny policy for anything other than the US and I have a need to add a single IP address in another country without allowing the whole country. I have two other custom regions but even editing those ...
Hello Palo Alto World! We are experiencing a "stream timeout" error when visiting srm.gzhtdq.com.cn (see also stream_timeout.png). When we disable GlobalProtect and do not use the VPN Tunnel, then the website works. I excluded the website from decryption, but it didn't help. I am not sure what the issue for this could be. The application bei...
I have a case that I need to get re-opened when the 'Manage Your Case' tab is not available. I can not open a new case because neither one of my Serial Numbers have licenses attached to them when they should. This was an RMA case that the old device was removed from assets so the new device can not have the licenses transferred. Please help.
HI, I Have created custom URL category e.g category name (*.xyz.com) Now I want to create inbound rule like below. Source zone :- Internet Destination Zone :- LANDestination IP :- AnyPort :- 389 , 4172URL Categary :- 'Custome category'Security Profile : Any My doubt is will this work on port 389 and 4172 port or this will work only on http and ...
Hello, team: The AnyDesk application is not recognised in Palo Alto version 10.2.17; it is classified as SSL and I cannot block it. Does anyone know if this is a problem with Palo Alto? I don't have any decryption policies, In my company, we can only block this through apps by policy. . Can anyone help me? Best regards
We have 2 User ID agents on 2 different windows servers. Both User-ID agents' services are getting hung up and requiring manual intervention of services being stopped and started after couple of days. The issue has progressively been getting worse as well. This is causing group mapping to intermittently fail. We have upgraded the gateways to the...
Hi, We have to migrate a standalone PA-820 to a cluster VM500. The config will be the same except few interface changes. Only security policies are deployed from panorama (not template). So what is recommended way to do It? Which option is better:1) export existing device state fw to the VM FW?2) export/import just the running config. Do som...
Hi all, If your using the HCSI for HA2, but using an ethernet port for HA2 Backup, is an IP required for the backup port since it's using a data port? Thanks!
Hello, We're adding the Microsoft 365 EDLs from here: EDL Hosting Service. The goal is to allow access to all M365 IPs and URLs outbound. What's best practice if I have two separate EDLs, one for IPs and one for URLs? I see that IP-based EDLs can be used in the Destination portion of the rule, and URLs appear to be only selectable in the ...
Starting early yesterday we began seeing a lot of activity from a subset of iPhones on our network getting mask.icloud.com caught by sinkhole.paloaltonetworks.comWe've been unable to find any commonalities between the devices. Wondering if anyone has been seeing anything similar or if this is a known issue?
Hello Everyone! I am looking for insight on the possibility of bringing PA-220s and PA-220Rs into SCM Pro for visibility and configuration. My research has led to conflicting results: Strata Cloud Manager Prerequisites indicates that the Advanced Routing Engine (ARE) is a requirement for onboarding a device into SCM. Advanced Routing sta...
Hi All, We like to have clarification regarding the current threat protection capabilities of Palo Alto Networks firewalls against LockBit 5.0 ransomware, which has been reported as a newly emerging variant around September 2025. Upon reviewing the ThreatVault database, we found several existing threat signatures related to LockBit (e.g., Troj...
Hi,I keep getting this error when trying to connect with global protect, this pc is on the internal network. I should get the massage 'Connected Internal'...any ideas. I have included the log below and highlighted the line.(T3776) 04/24/13 09:46:14:861 Info (2249): winhttpObj, HandleHttpsRequest, cmdStr = (T3776) 04/24/13 09:46:14:861 Info (2268...
I recently upgraded 2 locations of 3420s and 3410s to 10.2.10h4 from 10.2.7h8 and it looks like Palo Alto has included a feature that will identify the "preferred" software versions. This is a pretty neat feature native in the GUI which will help admins quickly identify the current preferred releases.As always admins should do their due dil...
BPry
on:
Github EDLs missing IPs?
PavelK
on:
Does the firewall need to have Panorama IPs in its permitted IP list for MGMT interface?
MP18
on:
Palo Alto 1420 - Invalid username or password.
PavelK
on:
How to build SCM Managed NGFW with no management internet access
MP18
on:
the Maintenance support for Palo Alto Networks hardware components
MP18
on:
How to block all AI-based applications
