Adding multiple client certificate in Linux GP agent

Hi Community,

I have a requirement to add multiple client certificate into Linux GP config. Usually, whe we put 'globalprotect import-certificate --location <cert_location>', the existing client cert will be overridden with the new one and it will be

PaloAlto VM Tools VIX_E_TOOLS_NOT_RUNNING using PowerCLI to Invoke-VMScript

Trying to configure my PaloAlto Firewall (PA-VM-ESX-9.0.0) using PowerCLI scripting, no issue creating & deploying VM, setting up PortGroups, and starting PA VM.  Needing to perform IP configuration scripting to complete the setup of the PA VM, so ju

C&C threat from outside 45.9.148.91 similar Shodan Malware hunter ?

Hi Live community,

recently when investigating a false positive C&C threat blocked from "shodan malware hunter" I was pleased to see others had posted into this community about this. In the past 24 hrs we have 2 SIEM alerts for C&C outside to publical

Palo Alto Virtual Firewall

Dear Friend,

Can you anybody advice me on palo alto multi vsys capability issues and currently contests of this technology? If one virtual instance compromise how we can make sure it not impact to other vsys ? How multi vsys behaviour on privileged e

Filter out whatsapp video only from PA220

Hi, 

Is it possible to Filter out whatsapp video only from PA220, or of there is a workaround solution to allow only Text and Images on a PA220 
We have business need to use whatsapp text and Images only 

Thank you 

Seeing these errors in my log pan_packet_diag.log

Hi

seems to be filling up my log file ?  I have no idea 

2020-07-04 12:09:26.595 +1000 Error: pan_cfg_url_policy_need_hdr_insrt_log(pan_cfg_url_policy.c:274): url_profile (nil), cfg available: 1
2020-07-04 12:09:26.595 +1000 Error: pan_cfg_url_policy_

Duo and Palo don't challenge when user connect immediately after disconnect

We have Duo access gateway integrated with Global protect.

It works most as per expected. However there is a small issue.

When the client machine reboot , the user will go through the entire process to login the global protect. E.g

1.       1. They clic

Captive portal browser challenge issue

Hi team,

While trying to deploy Kerberos SSO for enduser authentication I came up to the following issue with the captive portal (browser challenge).

When an end user logged in a windows (part of the domain) tries to connect to "http://neverssl.com"