This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! GlobalProtect with Active/Active HA

I'm having a hard time finding much, if any, documentation on this scenario. I've tried a couple ways of doing it and they work, but I'm trying to figure out what the best way to do it while being as redundant as possible. What I like the best so far is to have the portal and a gateway up on a floating IP so it can bounce from one firewall to t...

GlobalProtect on HA

We get SSL connect select error: 0(Resource temporarily unavailable), time left: 0P26083-T33415 08/07/2025 00:31:33:272 Debug( 468): SSL connect failedP26083-T33415 08/07/2025 00:31:33:272 Debug( 66): detailed SSL error info:P26083-T33415 08/07/2025 00:31:33:272 Debug( 956): connect() failedP26083-T33415 08/07/2025 00:31:33:272 Debug(3388): Conn...

gabe_0-1754592974792.png
gabe by • L1 Bithead
  • 1007 Views
  • 1 replies
  • 0 Likes

Resolved! Pushed template to Palo and now unable to SSH or HTTPS to device

Migrating a firewall and pushed a cloned and modified template to a new Palo alto. Did not push device group. Now I am unable to ssh, ping, https the device. I am on the device by console. Everything with the management interface looks on and I can ping the management default gateway from the Palo. What could be causing this?

M.Allen by • L1 Bithead
  • 1605 Views
  • 2 replies
  • 0 Likes

Resolved! Warning certificate chain not correctly formed in certificate

Hello All I have imported a cerfificate into the PA as a PFX. I have also import the intermediate certs and root CA. The cert is signed by Go Daddy with 2 intermediate certs and a Root CA. All imports fine, but when I get up global protect portal and use the imported cert (from the pfx) I get an error which says "Warning certificate chain not co...

live.png

Resolved! Multi Vsys query.

When managing a multi-vsys firewall, is the correct way to map each vsys to a unique Device Group? Lets say I have vsys_prod and vsys_dev, I would do: Device Group "prod_device_group" mapped to "vsys_prod" Device Group "dev_device_group" mapped to "vsys_dev" The reason for my confusion. I can see that Panorama allows me to add multiple vsys'...

Resolved! LDAP Authentication works when testing it via SSH command but fails on web interface

Hi When I'm running "test authentication authentication-profile "'LDAP Auth Profile" username myldapUser password" on the ssh cli, it authenticates successfully. however when i try to log in on the web interface of global protect, i get this on the webui log: failed authentication for user 'myDomain\myldapUser'. Reason: Invalid username/passwor...

gabe by • L1 Bithead
  • 1845 Views
  • 2 replies
  • 0 Likes

Devices pinging only after clearing ARP table

I am having an strange issue PA firewalls reachability to some of the nodes on the network. I have 10 identical devices connected behind this access switch and all 10 devices are accessible from the access and the core switch at any time. However, only 6 of them are reachable from the firewall at any time. The remaining 4 devices only pings whe...

BishnuA by • L0 Member
  • 1962 Views
  • 1 replies
  • 0 Likes

Is it possible to configure PA to send a reset(rst) packet when a session timeout occurs?

Hello. I'm running a PA-1420 device.The PAN-OS version is 11.0.3-h12. Is it possible to configure the PA to send RST packets to both sides when a TCP session times out due to aged-out?I read in a previous post that this wasn't possible on the PA, but I'm wondering if this is still the case.(https://live.paloaltonetworks.com/t5/general-topics/pa-...

What is the replacement of PCNSA certification?

Good morning, everyone I was planning to take the PCNSA certification, but I surprised when I noticed that this certification was retired in January 2025. My question is: What is the new certification that replace PCNSA and what is the study guide or book that I must buy to pass this new certification Thank you, Carlos.

No Linux dowload available

Hi everyone, I’m trying to get GlobalProtect VPN up and running on Linux, but the university portal only offers Windows/macOS installers—no native Linux package. I also tried signing in on Palo Alto’s site with both my personal and CPP email addresses, but I keep hitting this error: “An unexpected error has occurred. Please contact support.” H...

adongre by • L0 Member
  • 825 Views
  • 1 replies
  • 0 Likes

PAN OS 11.1 USER ID ,POLICY BLOC GROUPS

Hi Paloalto 11.1, user ID agent configured, it's pulling users with ip. But using policy to block or allow the internet is not working It blocks all users; if all domain users are allowed, the internet will be allowed. If a particular group is selected to enable through policy, it is blocked. I can see users in the user ID section and logs. P...

V.John by • L0 Member
  • 986 Views
  • 1 replies
  • 0 Likes

User-ID stopped working / Failed to add group to id manager

Hi Folks, just to let you know, since I found no KB Articel for this issue. Policy Push from Panorama respectively local Commit on the Firewalls ended in strange Error Message according Group Assignment to Policy. vsys1Error: Failed to add group to id managerError: Failed to parse security policy(Module: device)Commit failed Cure comes with CLI ...

enssenje by • L1 Bithead
  • 7871 Views
  • 2 replies
  • 2 Likes

Issues GP in Iphones

On iPhone, the gw for SAML authentication does not open the system browser (Safari). It opens the embedded browser. We configured the "default browser" in APP config like YES. In android is working fine but no in iPhones. Why? any incompatibility? On the other hand, we have a gateway using only certificate for authentication. In android is l...

BigPalo by • L4 Transporter
  • 2160 Views
  • 6 replies
  • 0 Likes
  • 24428 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks