General Topics

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

AI is upon us, and here's a fantastic chance to learn more about it!

During this virtual event, we will be hearing from top industry experts and senior executives within Palo Alto Networks about PANW's plans for AI to help drive a more secure futur

...

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer!

This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussi

...

Resolved! User Group Count exceeds threshold - PANORAMA

Hi Folks, looking for advice on an alert which is bugging me.

Our Panorama instance regularly (2 per hour) reports that:

Panorama - SYSTEM ALERT : high : User Group count of 12080 exceeds threshold of 10000

Now this is correct - as it comes from two (

...

Resolved! GP disconnect intermittely

Hi All,

The users are able to connect and work for sometime and then traffic flow stops; although Global Protect Agent shows that VPN is connected.

The user have to disconnect and reconnect again, then it will work for sometime and stops again.

This i

...

Global Protect portal Config selection criteria combination of User group/device check/custom check?

I'm guessing others are combining these together, but is it possible to specify these together mix/match? Specifically, We have configs without a custom check (custom checkmark box UNchecked-portal/agent/configs/config selection criteria custom ch

...

Adding ?v=panosurl to MineMeld EDL brought down our entire network

Just wanted to share this with the community in hopes that it may prevent one from experiencing the hardship that we did. We use MineMeld with our URL filtering rules. We appended "?v=panosurl" to the end of the end of the URL for our General_Block_

...

Resolved! UserID Active Directory multiple VSYS

Hello people,

I have a novice question so apologies if it is too obvious to some.

I have created 5 vsys and I want to use the same Active Directory server in all 5 vsys (vsys A, B, C, D,E) for userid in policies.

The Active Directory is only routabl

...

citrix web browser application dependency

I have 2 pa 850 . devices was not able to install antivirus update due to application dependencies on web browser. our citrix servers are not set up for web browing due to security concern. is their any other solution available. our pa configuration

...

Can we configure captive portal for windows machine in palo alto which are in domain?

Can we configure captive portal for windows machine in Palo alto which are in domain?

Customer do not want SSO authentication on Palo alto for machine which are in domain, while going to internet.

He want captive for traffic going to internet.

He want

...

Resolved! What is file file descriptor?

Hi.

I have a problem with management serves, sometimes when I try to connect to firewall by SSH I can see message "Cannot connect to management server". Process restarts itselft and connection to mgmtsrvr return, mgmtsrvr return to normal resource uti

...

PA-220 - 9.1.6 - DO NOT UPDATE

Hi guys,

We have had 3 PA-220's recently that have all failed and needed to be factory reset when upgrading to 9.1.6. I have a case open to investigate further but this version is still the recommended version which is worrying.

Luke

Site to Site IPSec VPN Configuration to extend Enterprise Network to a remote office

I have two PA800 NGFW running in Active-Standby HA mode and they are connected to a Perimeter Switch. Need an insight about a V-P-N Configuration on my PA that is about to connect to remote office. I am new to this and I brought this here because the

...

Panorama custom reports hang

Custom reports on my Panorama (9.1.6) were working fine until this week. Today, any report i run gets stuck in "please wait" indefinitely. Nothing has changed on the machine. Any ideas what i should look for?

Resolved! Local user Identification issue

As per the below mention snap-shot, we observed user id get changed with AD user and we have allowed the internet access to local user id which is configured in Palo Alto. Due to issue user facing internet issue.

We have not configure this user in AD

...

Capture Local user Identification issue.JPG

Resolved! Schedule cli command execute

Hi all,

I need schedule some cli command which i execute manually from SSH console like below;

Command line 1: test vpn ipsec-sa tunnel Xtunnelname:XtunnelProxyId

Command line 2: test vpn ike-sa gateway Xtunnelname

Is there any way schedule tasks in p

...

Failed to Launch Help warning pops up randomly while connected to GloabalProtect(5.1.5)

Hello everyone, most lately have started seeing a warning messaged "Failed to Launch Help" pop up randomly while connected to GloabalProtect(5.1.5). Tried looking for KB Articles around it and could not find any. Was wondering if I could get some ins

...

changing AD user passwords through globalprotect app

Hi Community,

I have the following scenario:

user_1/password_1 Active Directory credentials for login into windows system and domain

user_2/password_2 Active Directory credentials only for globalprotect authentication.

I´d like to know if there is a wa

...

Discussions

Join us for an amazing virtual event - Ignite: What's Next - October 28, 2025

Discover LIVEcommunity Through Our New Animated Explainer Video!