After upgrading the equipment, an ha sync error occurs. device-telemetry: invalid region 'americas'

The errors that occur after upgrading the equipment are as follows

Current OS: 10.2.7-h3

Agentless USER-ID timeout

Hello,

We have USER-ID setup to get our wifi logs and that is working well for most of our devices however we have an issue where the iPads will initally get a connection but then after timeout period set in User Identification Timeout they remain

Schedule Export of Configuration Files Questions

Hi All,

My goal is to set up a daily backup of Panorama/Firewall Configs.

Regarding config backups, does anyone know if the OS matters? For example, the SCP/FTP server is UNIX vs Windows where the logs are stored?

I also understand only Panorama can do

EDL with ending token is not valid

Hello Guys,

Im having a problem with EDL, some while ago a pop up start appearing when creating or opening an External Dynamic list, suggesting that append an ending token when using domains, i try to append a token "/" without the quotes obviously

openssh vulnerability clarification

Team,
             Below Advisory mentioned that openssh 7.9 is affected with few vulnerabilities  and on upgrade to 8.1.13 will resolve it.
https://security.paloaltonetworks.com/PAN-SA-2020-0002

but below pan os open source listing mentioned as openss

GP users stop working each 30 minutes

We currently have version 6.1.4-711 of Global Protect deployed for the establishment of VPN sessions for teleworking users against our perimeter PAN FW. Panos is 10.2.8-h3

We have a group of users (a small part of the total) to whom Global Protect in

Automatically generate a network diagram for auditors

There is such rich data stored in this tool, is there way to generate a network diagram?

I need to have up-to-date network diagrams for SOX and PCI audit every year.  It would be awesome to have a diagram generated that I could review/update and then

GlobalProtect Prelogon tunnel and Portal authentication

Looking for assistance on a GP setup. I want to have a pre-logon tunnel (certificate, always on) and a portal, which uses SAML authentication.  I also need the user to have to re-authenticate any time they disable, sign-out, reboot, etc. The problem

Palo Alto and IBM Acquisition

Does anyone know the cutover date of Acquisition with IBM's QRadar and PaloAlto?

Disable and re-enable the 2FA for GP VPN connections

Dear community,

What is the best way to  temporarily deactivate 2FA authentication for Global Protect VPN SSL connections and enable authentication solely via LDAP server by entering the username and password, we aim to seamlessly reinstate the 2FA a

Unable to find the reason for packet drop

Hello,

In our Palo Alto the traffic is allowed on the firewall but it is not working. When we did packet capture we found that return traffic in drop stage. To find the cause of the packet drop I have set the filter using 'Manage Filters' in GUI th

Palo lato firewall is not fetching latest dynamic updates and software updates

Dear Friends,

We have a customer who is not able to fetch latest dynamic updates and software version.

we checked, ping reply is coming from updates.paloalto also address is getting resolved, 

we restarted device-server and management server also w

Slow GlobalProtect on PA-1410

Trying to see what might be going on with our PA-1410 after we upgraded to 11.0.2-h4 from 11.0.2-h1. We have tons of tickets for slow GP connections since that upgrade a few weeks back. We have a 1gb link and average usage is <100mb.

Users will co