General Topics

Understanding Syslog: Strata vs Panorama

Hello, I am part of an MSSP, and we ingest data from multiple clients. Some clients forward logs from Panorama, while others use Strata Logging Service. I would like to understand how we can differentiate logs based on their source—whether they were forwarded from Panorama or Strata. Is there a specific identifier or static keyword in the logs...

Sending Before Change and After Change details in Panorama to Syslog

I've been testing the logging of change events to a syslog server from Panorama. Syslog events indicate a change made by a person and the general section of the change without giving any specific details of what was changed. Looking in Panorama in the Monitor tab I can see the change event and some details that are sent to syslog, but the deta...

APP-ID: Xunlei TCP 33221

Hello, has anyone encountered this application "xunlei" appearing in the traffic logs using destination port TCP 33221? This port is also used by Cortex XDR. Wondering if this is malicious or benign. Appreciate your comments. Thank you.

Frequent DPD flaps between CGW and AWS

Hi, Frequent flaps between CGW and AWS site-to-site VPN occur and DPD down logs have been seen. Does Palo Alto devices not go well with AWS? Has anyone experienced such a problem? Thank you,

Resolved! Trouble with Asterisk

I would have submitted a TAC case, but the customer support portal is broken and you have to have a TAC case to speak to someone on the support number. Anyway, having issues with using the asterisk when creating a URL object. Our task is to block several websites, directing us to use, for example, *.badwebsite.* Please advise.

Beacon content : Not credential received after complete the path

Hi there, after I complete the full path in beacon for the course of Prisma SD-WAN features, and pass the final assessment, I do not receive the credential. So something is wrong?If I see the path, it appears to be complete

Replace with advanced License

Hello Threat Prevention LicenseDNS Security License These two licenses are coming up for EoS on June 16, 2025,Is there any problem in replacing the licenses to Advanced, or is there a little work that needs to be done when replacing the licenses? I'm assuming I can move to Advanced without any problems?

Resolved! PANdora's Box

Anyone else seen this article from HackerNews? Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits I'm being told these are all old vulnerabilities and I shouldn't worry my pretty little head about them. We've a couple of new 1410's on order and I'm wondering what, if anything, I need to do to ensure that I really...

Resolved! Ping management interface

Hi Initial configuration is like the below. why we cannot ping 192.168.8.100 ? i would like to allow the firewall to be ping and accessed via https. Maybe it need to add some command . Anyone can provide some suggestion? Thank you admin@PA-VM> configureadmin@PA-VM# delete deviceconfig system type dhcp-clientadmin@PA-VM #set deviceconfig sys...

Unable to log in to CSP using 2-factor authentication

I receive the following error when logging in with my username, password, and accepting push notification to OKTA verify: Login to Livecommunity works using this method. Please advise as to what I might be missing. Thank you.

Unable to log into Customer Support Portal using credentials.

My 2-factor authentication works with the Livecommunity portal, but not with the Customer Support Portal. I receive the following error: Unexpected error has occurred. Any ideas?

Stable version

We just upgraded to the recommended stable version 11.1.4-h7. So far no issue.

Resolved! VLAN Interface is missing configuration options

PA440 Software 11.1.6 when configuring a VLAN interface for ipv6 / static ip, there are no options available like router advertisement or dns support here is the same configuration menu for an ethernet interface is this intended? and if yes, how to set "Managed Configuration" or "Other Configuration" bit fields in router advertiseme...

Resolved! dns-signature cloud service unavailable

Hello, everyone, we have had this message in the system log for two or three days, is there currently a problem with the Palo Alto Cloud? Does anyone else have this message too? Thank you.

VPN Tunnel Flapping

Hello all, We are detecting problems with a VPN Tunnel using IKEv2. The tunnel is a L2L tunnel agains a third party vendor (Sonic Wall) the tunnel works fine on all the aspects, but sometimes the tunnel falls down and we do not why exactly. When the tunnel falls it takes onlpy a few seconds to up the tunnel again. The error that I saw on the log...

Discussions

Understanding Syslog: Strata vs Panorama

Sending Before Change and After Change details in Panorama to Syslog

APP-ID: Xunlei TCP 33221