General Topics

CPSP Program Member Confirmation

Hello, 

I am both domain administrator and super user in paloalto. And, we are partner. I need to get Micro-Credential for Cloud Security Consultant (PMCC). It needs "CPSP Program Member Confirmation". And, I send request and it says, "Activity req

Threat Prevention - Qualys PCI

Hi all, I have a bit of a dilema here and hoping somebody may have some ideas....

1. We have threat prevention profiles applied to security policies relating to traffic entering our DMZ from the internet.
2. We have PCI obligations and use Qualys' PCI scann

Palo Alto's preferred version 10.2 having significant issues

Hi All,

10.1 is going to be EOL in Dec-2024 and if we plan to upgrade on palo alto preferred ver 10.2 then There is a risk that the firewalls may experience significant issues ("popcorn effect"), potentially causing major disruptions to business op

THREAT ALERT : high : 169.254.254.238 -> 169.254.255.255 Microsoft Windows NAT Helper DNS Query Denial of Service(31339) alert

Hello Team,

We got the below threat alert from the panorama and not able to understand the most of the part , like source and Destination . Both IP looks the outside my network but still its showing the rule: Outbound_Default_URL_IPS . One of my outbo

Traffic log source user different from User-ID log

Hi everyone,

Greetings!

PA-1410
11.0.4-h1

I have a bit odd issue, the traffic log (ip address) is showing a local firewall account as the source user but when checking the user-mapping (show user ip-user-mapping ip) or User-ID log was mapped to an AD-us

Assistance with URL Filtering

Having some issues getting URL filtering to work as I would expect.  Have a valid license, created a URL filter profile blocking some categories.  Created and SSL decryption policy as well and applied it to a test users.  Games is one of the categori

Unable to see IPSEC tunnel IP in trace

Unable to see IPSEC tunnel IP in trace.

IPsec tunnels have tunnel interface where the IP is configured. 

Peer1  - PA 

Host 1 - behind PA

Peer2 -  Other vendor

Host 2 - behind Peer2

Host 2 trace to HOst1 , can see Ipsec tunnel IPs in trace,

when

Single vpc with Igw, alb, gwlb and Apache servers. Not working

I followed the directions to a T. Ingress route on Igw, pointing towards the subnets defined in alb. Gwlbe subnet with default route to igw, default route on alb subnet to gwlbe, app subnet with default route to gwlbe. end points defined, gwlb with h