This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4220 Views
  • 0 replies
  • 0 Likes

No Linux dowload available

Hi everyone, I’m trying to get GlobalProtect VPN up and running on Linux, but the university portal only offers Windows/macOS installers—no native Linux package. I also tried signing in on Palo Alto’s site with both my personal and CPP email addresses, but I keep hitting this error: “An unexpected error has occurred. Please contact support.” H...

adongre by • L0 Member
  • 691 Views
  • 1 replies
  • 0 Likes

PAN OS 11.1 USER ID ,POLICY BLOC GROUPS

Hi Paloalto 11.1, user ID agent configured, it's pulling users with ip. But using policy to block or allow the internet is not working It blocks all users; if all domain users are allowed, the internet will be allowed. If a particular group is selected to enable through policy, it is blocked. I can see users in the user ID section and logs. P...

V.John by • L0 Member
  • 845 Views
  • 1 replies
  • 0 Likes

User-ID stopped working / Failed to add group to id manager

Hi Folks, just to let you know, since I found no KB Articel for this issue. Policy Push from Panorama respectively local Commit on the Firewalls ended in strange Error Message according Group Assignment to Policy. vsys1Error: Failed to add group to id managerError: Failed to parse security policy(Module: device)Commit failed Cure comes with CLI ...

enssenje by • L1 Bithead
  • 7611 Views
  • 2 replies
  • 2 Likes

Issue with GP Access for JIO Users on PA-820

Dear Friends, One of our customer is facing an issue with users on PA-820. According to the customer, many users are connecting to the internet via mobile hotspot using JIO SIM cards. While they can successfully connect to GlobalProtect, but they are unable to access internal servers.This issue is specific to users who are using JIO SIM cards ...

Issues GP in Iphones

On iPhone, the gw for SAML authentication does not open the system browser (Safari). It opens the embedded browser. We configured the "default browser" in APP config like YES. In android is working fine but no in iPhones. Why? any incompatibility? On the other hand, we have a gateway using only certificate for authentication. In android is l...

BigPalo by • L4 Transporter
  • 1838 Views
  • 6 replies
  • 0 Likes

we have High Severity tickets for ALERT: Warning - AAA - [Free Disk Space

/opt/traps below servers’ issue [root@usaz15ls128 ~]# df -h /optFilesystem Size Used Avail Use% Mounted on/dev/mapper/vgRoot-lvOpt 6.0G 6.0G 20K 100% /opt[root@usaz15ls128 ~]# du -sh /opt/traps/5.7G /opt/traps/[root@usaz15ls128 ~]#[root@usaz15ls132 ~]# df -h /optFilesystem Size Used Avail Use% Mounted on/dev/mapper/vgRoot-lvOpt 6.0G 6.0G 20K 1...

A.Anam by • L0 Member
  • 747 Views
  • 2 replies
  • 0 Likes

Policy processing order

I have a question about how policies are processed; specifically NAT vs Security Policy. We have a NAT policy that performs destination NAT to translate all traffic to port 53 to be translated to our corporate DNS servers. We have a security policy for DNS that permits outbound access to only our corporate DNS servers. All other DNS destina...

jwill2 by • L2 Linker
  • 926 Views
  • 1 replies
  • 0 Likes

Problem with the DuckDNS certificate for the DDNS service.

Hi,I'm having an issue with Palo Alto and DDNS — specifically with DuckDNS. Everything had been working fine for the past two years, but for about a month now, Palo Alto is showing an SSL certificate error.The exact error message is: Server response: Peer certificate cannot be authenticated with given CA certificates I’m not sure which certifica...

A.Kuszaj by • L0 Member
  • 1688 Views
  • 2 replies
  • 0 Likes

EDL server certificate authentication failed. A local copy of associated external dynamic list will be used

I'm receiving this error from our firewall every 2 minutes, I can't figure out what the cause is. The reason says "self signed certificate in certificate chain" but I don't know what self signed cert it is talking about. This has been working for years now, the cert selected on the firewall is the GoDaddy root from https://certs.godaddy.com/repo...

Unable to HTTPS or SSH into new out of the box PA440

Had a new PA440 delivered to a remote location. I am able to ping the device (192.168.1.1) but am not able to HTTPS or SSH into it. Assuming that my IT person at the remote location has the device plugged into the MGT port and in the switch, which since I ping it I am assuming that is the case I am not sure why I can not get in at least with SSH...

dahoove by • L1 Bithead
  • 8678 Views
  • 9 replies
  • 0 Likes
  • 24355 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks