Zone Protection Profiles

I need to configure a zone protection profile and assign this to our outside interface. However when i attach the zone protection profile to the zone in question users who connect via the global protect vpn client it seems to stop users connecting.
Ha

Terminal Services Agent allocates ports outside the defined port range

Hi,

I have the problem, that the Terminal Services Agent sometimes allocates ports to users that are out of their port range.

That leads to the usage of wrong security polices.

For example for one user I configured 22800-22999 as the port range.

That u

GlobalProtect not allowing internet access when Parallels or Docker are running

MacOS installed: macOS Sonoma 14.5 latest

GlobalProtect client installed: 6.0.7-372

Parallels Desktop: 18.2.0 (53488)

As the post title says, when Parallels or Docker are running, our GP isn't allowing network access (myself and others are having s

User-ID Agent Connected Status Shows Red

This is a PSA for anyone having issues connecting/ setting up the User-ID Agent program on a Windows server.

After installing the correct User-ID Agent from Paloalto's support site, you need to make sure you've set correct security/ access settings fo

Unable to add AD group to Group Include List

System logs showing error:

User Group Count of 'xxxx' Exceeds Threshold of 1000.

I am trying to shrink the group numbers by using specific user group.

Issues:

1. on Panorama template setting, there is no option to select the user group, pls refer t

After upgradation no traffic flow between DMZ to WAN

Hi Team,

I hope you are doing well.

One of our customers is attempting to upgrade their PAN-OS version from 11.0.4-h1 to a higher version, as the 11.0 version is nearing its end-of-life.

The issue encountered is that whenever we upgrade beyond

Error deleting custom URL categories?

I created a custom URL category and then tried to delete it and got this on the validate, any ideas please?

Operation           Validate

Status   Failed

Details  member corp-blocking-exclusions is an invalid reference

Invalid block

Invalid url-filtering

Panorama and firewall upgrades schedule

Have a question related to the upgrades;

Can i schedule the Panorama software upgrade ?

Also , can i schedule the Managed firewall upgrades through Panorama ?

I see schedule option for App and threat updates but not for PanOS images

Error when renewing Certificate "Failed to read certificate"

Hello Bro,

              Recently, I was trying to renew a certificate but I received the error "Failed to read certificate".

I have tried it like 4 times receiving the same error.

Tried by renewing the CA first or by the child first, both cases I re

SYSTEM ALERT : high : Number of hints on disk has exceeded 5000 due to log forward failures

Hello I receive many alerts with subject SYSTEM ALERT : high : Number of hints on disk has exceeded 5000 due to log forward failures. I do not have panorama (never did). Is there a way for these alerts to stop.

Below is the alert i received from emai

Certificate not valid

I am trying to setup Machine authentication, where it actually validates the machine certificate, I have a PKI infrastructure, that pushes certificates to the machines, with there name in Common Name, and SAN, of the machine hostname. 

On they Certif

radius and PANF gui

Hello ,

I have integrated Radius with VM FW

the ssh to FW works . I have not created any local user on FW , All users are on radius server

but gui to FW does not work  with radius account ;

when i enter radius creds in gui , it accepts and co

Tests anti-malware signatures before releasing them to the public

I would imagine Palo Alto tests dynamic updates such as  Antivirus and Device-Dictonary signatures through a rigorous process before releasing them to the public.  Does anyone know where I can find that process?