Mapping problem of users (XMLAPI) authenticated in Clearpass

Hi team,

The problem detected is that Palo Alto (PAN-OS 9.1.13-h3)computers register too many IPs for each user through XMLAPI (RADIUS-Clearpass origin). Usually a user is not connected to the WiFi network with more than 3 devices (work computer, per

advanced URL & URL4 license HA configurable check

Dear Team,

I understand that the same license set is required to configure HA according to the content below.
- The same model
- The same PAN-OS version
- The same type of interfaces
- The same set of licenses

Customers want to configure HA while introdu

Re: How to Post a LIVEcommunity Discussion

Hi Team,

PALO ALTO to AWS site to site VPN not established

Issue:
PALO ALTO to AWS IPsec site to site VPN not able to established.

Situation

Since AWS will provide two VPN tunnel by default.
One of the VPN tunnel is established using the same public IP of PALO ALTO while the other VPN tunnel not able to establis

Question for SaaS Security API and Inline

Hello, I am SE from Korea.

Is there have one admin console for SaaS secure API and inline?

I have both configured, but the console is different.(attached picture)

However, Palo Alto Korea said, 'console has been integrated in one'.

how can I

CVEs that cannot be found in Palo Alto Advisories

Hi there,

Does anyone know what does it mean generally for CVEs that cannot be found on Palo Alto Advisories?

Does it mean Palo Alto is not affected or the advisories has yet to update?

A few examples that cannot be found would be the following :

CVE-

L2 Extensions

Hello People ,

We have a situation where in  a Site to Site IPSEC exists between Cisco ASA and PALO ALTO FW 

The LAN segment of the Network is behind Cisco ASA . Infact all of the VLANS  are in this LAN Segment which is Behind Cisco ASA .

The require

PBF with ECMP Issue

Hello, i have question about PBF Using ECMP.

We have 3 ISP and using ECMP Setting with weight round robin and Symetric Return Settings

ISP A > 200

ISP B > 100

ISP C > 50

NAT we set like this

All  User > ISP A

Using PBF for some IP Segment

Segment A to ISP

Inbound decryption seems to changed preferred order

Without decryption server preferred order comes out as this.

And after enabling decryption it appears as 

Looks like PA is doing it. Is there a way to manually control this order on PA

No transmit/drop in capture

What are the reasons we don't see transmit or drop in capture and traffic log shows traffic is allowed to/from correct zones, and tcp as age-out in logs. Packets only show in receive/firewall stage. Alos checking flow basic, I do not see the packet a