User-id doesn't work on SSID

I have PAN UID agent mapping IP-to-usernames. It works like a gem for internal users but not on the DMZ which allows company phones with their AD creds. I am not seeing any usernames for these users although they authenticate against AD server. has a

Commit error profile compiler can not find tid 40006 in threat database

Hi,

We are having issues with commit in the FWs from last Wednesday. The error that we receive is: "Error: Profile compiler : can not find tid 40006 in threat database". The commit finishes correctly, but with the warning of the error.

We have revert

NAT + DIPP question

Hi - we have experienced an issue where users in a certain zone were having intermittent problems accessing the internet. We speculated that there could be a NAT issue, and the pool might be full, or translations just werent working. The pool is larg

POC in AWS - Palo Alto Active/Active under NLB

Working on a POC. 

Have two firewalls sitting under an NLB. One of the firewalls routes traffic to database. This appears to be a limitation on the VPC route tables. 

With traffic from App server destined for the DB, it goes through AZA palo alto. 

W

PXE Boot Not Working

Hello everyone,

I have a new issue where a PA3020 has been placed between Client and Server subnets on the network. Since this install, building new PCs using PXE boot and deploying Applications using Windows SCCM no longer works.

The build starts and

Auto update of trusted root CA

Hello,

Our PANs are not updating the list of trusted root CA certificates which is causing issues with services such as Microsoft Skype for Business and other applications as we have SSL decryption enabled. Using PAN-OS 8.0.7

For example, Microsoft us

Analysis ransomware

Hi,

One of our servers have been infected by any kind of ransomware. We can see several files encripted. So we are seeing any evidence about the infection in the PA. The only trace that we saw in PA is that the infected server sends many dns sessions

what does these values mean snmpEtherStatsRXNoErrors and snmpEtherStatsTXNoErrors ?

Hi,

Trying to rule out the a file transfer througputput issue,  looking at the interface stats,

1.  Is there a technote explain these values mean?

2.  What are these values mean snmpEtherStatsRXNoErrors and snmpEtherStatsTXNoErrors ?  

Thanks,

E

admin

Global Protect HIP Processes

Hello,

We are trying to produce a Custom Report of all the Processes (Failed and Successes) that are logged in the HIP Match Log Details.

Is there a way to do this?  All we see is HIP and HIP Type, but no way to display the processes in a report.

Tha

Is there a way to make URL custom allow list take precedence over the block lists

Hi All,

I have an issue where we at times we block whole domains but we sometimes need to allow one sub-domain through.  We recently put in the Palo Alto content filter and we have found it behaves very differently to our previous content filter whic

Site to Site VPN cannot use any private network range

Hello,
I have to set up a Site-to-Site VPN so our users can access some resources on a clients network. As we had here a lab firewall, another Palo Alto, I set up a test between our production and lab. This worked and I was able to connect. For the ac