This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Discover LIVEcommunity Through Our New Animated Explainer Video!

We’re thrilled to unveil a brand-new animated video that highlights everything LIVEcommunity has to offer! This short and engaging video gives you a quick tour of the many resources available in our vibrant community — from interactive discussions and customer journey guides to the Cyber Elite program and Member Spotlight features. Whether ...

kiwi_0-1745308399217.png
kiwi by • Community Team Member
  • 4108 Views
  • 0 replies
  • 0 Likes

Resolved! Explicit allow to Microsoft Update services

I've read through a dozen questions and the scores of answers to those questions, and I'm finding a mix of outdated information, bad information or just unrelated options... I suspect this is going to send down a rabbit hole, so I'll try to compartmentalize based on my testing. I never progressed far enough to get close to a resolution. So, ...

bhelman by • L2 Linker
  • 37963 Views
  • 8 replies
  • 1 Likes

Detection of AI Agent Run Time via XDR

Hi everyone, I’m curious about XDR’s capability to detect AI agent runtime activity. My understanding is that XDR is quite effective at identifying post-incident artifacts, C2 IPs, and similar indicators. is it also possible to detect AI agent runtime behavior?

D.Ciftci by • L0 Member
  • 1702 Views
  • 4 replies
  • 0 Likes

User-ID mapping without ldap across an enterprise

Hi All, not having the best day with thinking 😞 Palo Alto Scenario: PA FW CLuster in HQPanorama Log Collector only in HQStandalone PA FW in SiteAStandalone PA FW in SiteBStandalone PA FW in SiteCStandalone PA FW in SiteD No Panorama mgmt in place. All Sites have L3 connectivity back to HQ FWs are configured to send logs to log collector...

PA_nts by • L4 Transporter
  • 2644 Views
  • 3 replies
  • 0 Likes

Resolved! pa-450 issues and going down 2 days in a row

all our path monitoring profiles on our ISP links were down even though the ISP was up and we confirmed internet access. There was no ping connectivity from the ISP Firewall Interface to the ISP gateway and we have 3 ISP connection. When we removed the path monitoring profiles on the default route, there was still no connection. Downgrading the ...

F.Pinar by • L3 Networker
  • 1314 Views
  • 4 replies
  • 0 Likes

Policy Cache Usage Warning After Upgrade to PAN-OS 11.1.13-h1

After upgrading to PAN-OS 11.1.13-h1, we started seeing the following warning log:Warning: Policy cache usage is greater than 80 percent of the capacity We have multiple firewalls in our environment, but this issue is only occurring on devices that were upgraded to version 11.1.13-h1. When checking with the following command:> debug datap...

khkim by • L0 Member
  • 469 Views
  • 1 replies
  • 0 Likes

Captive Portal with custom images

Hello everyone,I'm trying to implement the custom Captive Portal Response Page with custom images in it. Is there a way to upload my own images to the Palo Alto to use them in the Captive Portal? I did found the info about using the custom images from outside web or FTP resources via URL tag, but it doesn't fit the requirements of my customer. S...

higawajj by • L0 Member
  • 4670 Views
  • 2 replies
  • 0 Likes

BPA API Query Error

With the impending demise of On Demand Best Practice in Strata Cloud Manager coming fast on 31 March , has anyone seen this error before when trying to do a on demand bpa via the AIOPS for NGFW Best Practice Assessment API. The error is error_code 1210 description is "Failed to associate AIOPS instance with TSG" but Aiops doesn't exist anymore...

API - Number of object /item return valu

Hi Team/ @BPry Just checking , what is the default number of object/item return value per page while running get operation.For example, i am trying to pull all address present at shared location and we have around 30K+ address present. So what would be default return value of object per page. If there is any document , it will be helpful .Thanks

Resolved! PA-445 VERSION 11.2.7-h8

My pa-445 version 11.2.7-h8 sufferred a suddenly reboot affecting the whole operation. Troubleshooting : 1. ID:69b1fcea60b6f010bfa3a5e8, Serial:028101007082, OS:11.2.7-h8, Platform:400, IP:10.166.240.10+++++ 2026/03/11 11:52:35 System reboot /opt/panrepo/logs/reboot.log 2026-03-11 11:52:35 SYSTEM REBOOT [Watchdog tim...

F.Pinar by • L3 Networker
  • 2321 Views
  • 3 replies
  • 0 Likes

Issue ports to switch turned (errdisabled) for both HA pair after upgrade from 11.1.6-h14 to 11.1.6-h25

Hi All, We have a pair PA 5220 in HA x2 and in PAN-OS 11.1.6-h14we perform upgrade to PAN-OS 11.1.6-h25, the upgrade is successful but we counter issue issue ports to switch turned (errdisabled) and it running normally after that First Pair HA we able to recover with shut/unshut the errdisabled interface however the second pair we try th...

Resolved! Prisma Browser ECCN

Hello, I downloaded Prisma Browser https://get.pabrowser.com/welcome and I am looking for the ECCN (Export Control Classification Number). Can someone in your Trade Compliance or Legal department provide me the ECCN ? Thank you.

Resolved! Panorama HA Pair and Managed Log Collectors Upgrade Process - Clarification

Hello All, Planning an upgrade of a Panorama HA pair in management-only mode with two dedicated log collectors to PAN-OS 11.1.x from PAN-OS 10.2.x To assist with the explanation below: Unit A - Panorama Active Unit Unit B - Panorama Passive Unit First, after reviewing the upgrade documentation (Upgrade Panorama in an HA Configuratio...

nohash4u by • L3 Networker
  • 2091 Views
  • 2 replies
  • 0 Likes

Resolved! Palo Alto in Virtual Wire mode : Traffic not passing throught internet perimeter Firewall

Dear All, I'm doing POC at customer who use Checkpoint as Internet Firewall. So i deploy Palo Alto behind Checkpoint firewall in vwire mode. After We configure and install policy everything running well and to minimize the risk we configure permit all any any in the bottom of security policy. At the end of the PoC we try to disable the Permit ...

  • 24332 Posts
  • 124 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks