General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Resolved! Login issues after password complexity change

We changed the password complexity and history settings on our firewall a couple of days ago.After committing the changes the local users are not able to login on the firewall.So we tried to boot into maintenance mode by connecting through a console cable in order to roll back to a older running config.This did not do anything though, because th...

ilirrama by L1 Bithead
  • 5851 Views
  • 6 replies
  • 0 Likes

Captive portal auth doubt

Some people complain of the captive portal redirecting them when they are in the middle of filling out a form, or doing work on a online portal, is it possible for the captive portal to appear in a different tab like a pop-up instead of a redirect?

BigPalo by L4 Transporter
  • 183 Views
  • 1 replies
  • 0 Likes

Validation of the PAN VPN, SSID, and PEAP-TEAP Protocols

Hi Team I got a question : During a previous session with end user, it was determined that, following the migration from PEAP to TEAP on the metropolitan area’s wireless network, 802.1X authentications fail to complete correctly when traversing the site-to-site VPN between a branch and the corporate headquarters.From a technical standpoint, t...

F.Pinar by L3 Networker
  • 362 Views
  • 2 replies
  • 0 Likes

Avoid reauth in Captive portal

Hi, I have captive portal for auth users with SAML. Users are being prompted to reauthenticate after 20 minutes more or less. Where can the timeout be increased, or how can the requirement to reauthenticate every X amount of time be removed?

BigPalo by L4 Transporter
  • 419 Views
  • 2 replies
  • 0 Likes

GlobalProtect is no longer able to retrieve information for Trend Micro Apex One Security Agent

We are experiencing an issue where GlobalProtect is no longer able to retrieve information for Trend Micro Apex One Security Agent. As a result, our HIP Objects that rely on this product are no longer matching correctly, and we cannot enforce the related security policies. Everything was working as expected until 17 June 2026, when the issue app...

Is PAN-OS 11.1.4-h33 vulnerable?

Dear Community Members, I want to ask couple of things: Is the PAN OS 11.1.4-h33 vulnerable based on CVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI and should be upgraded to PAN OS version 11.1.4-h34 and above? For PA-14020 it came with a base of 11.1.0, can this support to move to other based P...

EDL MS Intune All URL misses an entry

Dear all We got a question assigned about the PaloAlto EDL for MS Intune, the EDL "MSIntune All URL" (accessible via https://saasedl.paloaltonetworks.com/feeds/msintune/all/url). By 30th of April 2026, Microsoft added the URL "lgmsapeswiss.blob.core.windows.net" to her list, which can be reviewed here: Network endpoints for Microsoft Intune - ...

What is the Best Practice to block iCloud relay?

What is the best practice method to block iCloud relay without impacting iOS users too much? Apple says to NXDOMAIN the following below. mask.icloud.com mask-h2.icloud.com Prepare your network or web server for iCloud Private Relay - iCloud - Apple Developer For the PA though,... should we... create a policy to block, deny or use a URL custom b...

phampx by L0 Member
  • 8227 Views
  • 4 replies
  • 0 Likes

Resolved! Global Protect with multiple portals and gateways.

I have a working portal and gateway on PA3020 running 8.0.12.I want to setup another portal and geteway and repliciate all the settings.Second GP will be used for testing purposes.Only changes would be to use another public ip ,create another tunnel and loopback interface and ip pool.Just want to make sure I dont break prod global protect while ...

Authentication Failure at Home Network

My Authentication does work correctly on Office Network, But It does not work on my Home Network. Lan Cable, Wifi and Mobile Hotspot does not work at all. I did drop a mail from my official email id, somebody please help.

  • 24410 Posts
  • 124 Subscriptions
Top Solution Authors
Labels