Using Authentication Policy and GlobalProtect with AAD SAML to prompt MFA authentication for Admin access to resources

We have new requirements to require MFA for administrative access to just about everything and have to put into place in very short order.

“In addition to remote access, multi-factor authentication is required for the following, including such access

Split Tunnel Routing Config Help

Looking for some help on split tunneling.

We are on PAN os 9.1.9 GP client 5.26, for our LAN we also use Cisco Umbrella to block sites.

What I want to do is when GlobalProtect connects I want all LAN traffic going through the VPN traffic, and all Inter

PA-5050-Data plane showing high

Dear Team,

Our Core firewall Data plane  CPU reaching to 99% , When we checking the traffic logs some MS-SQL application getting high usage, and system logs are showing "dataplane under severe load palo alto".

Pan os : 8.1.15-h3 ,Device : PA 5050.

Ki

Palo Alto Globalptotect intermitant PanGPS error 'network type is unknown network' that causes the HIP report to not be send every hour

Has someone seen an issue where the PanGPS log is saying "network type is unknown network" before failing to send the HIP report every hour?

For info we don't use or have enabled Internal Host Detection as there no internal gateways and I see that t

Knowledge sharing: restarting palo alto processes , reboot , shutdown, factory default reset

In palo alto like any some things are fixed with an restart.

1. If the managment plane in the masterd log (for more about the Palo Alto logs and their meaning you can check https://live.paloaltonetworks.com/t5/general-topics/knowledge-sharing-palo-al

Storage V-Motion

Hello,

Our Virtualization team Storage vmotioned all the VMs on a specific host and that included VM-Series Firewalls for NSX as well.

Resulting that the firewalls pass 0 kbps of throughput and dropping all the packets. We were able to identify this

Incoming traffic being not logged on external IP

Hi 

Any help greatly appreciated.

I have 4 internal IPs w x y and z that need to route out on one of my external IPs (1.2.3.4).  And then I need the ingress traffic on 1.2.3.4 to be routed to w x y and z based on the incoming port number.  I am also

MAC addresses for HA interfaces

I have 2 virtual instances of PA-8.0 on a laptop in a home lab for learning purposes.  High Availability is configured in Active/Passive mode with HA1 using the management interface and it is working but HA2 is failing to sync and complete initializa

Global protect certificate expiry

Hi team,

Can we renew the server certificate used for gp before expiry can you please let me know if there would be any impact after renewing the certificate before expiry??

Or we need to renew the certificate before 1 day ???