TAP interface questions

I'd like to monitor a portion of my network on my failover PA in TAP mode.

Will this affect my HA pair at all? 

Is it possible to set up an aggregate TAP of 2 ports?

thanks in advance...

PA-415-5G not working with fresh T-Mobile SIM

Hello yall!

I am currently having trouble getting my PA-415-5G working with a new T-Mobile sim. I have the "Bus Int Unl Elig BYOD" plan. I see that the firewall can recognize the sim card, but it gets stuck on the:

Registration State : Searching
Acti

Source user not showing in traffic logs

I have the agentless user-id configured in my PA-500, software is 5.0.4.  If I do a "show user ip-user-mapping all", it retrieves a list of usernames.  However, in my traffic logs (which is currently only limited to a few machines that are running th

Concern Regarding Inclusion of Open-Source Projects in "Shareware and Freeware" Category in Advanced URL Filtering

Hello Palo Alto Community,

I am writing to raise a concern regarding the categorization of websites under Palo Alto Networks' Advanced URL Filtering. Specifically, I have noticed that sites providing access to open-source projects (such as Github,

resources-unavailable for DNS-base traffic

Model: Palo Alto PA-3420
Software version: 11.2.4-h1

Most of our dns-base traffic has the "session end reason" resources-unavailable suddenly. We're also having trouble loading webpages. The resources-unavailable reason is only on DNS-base traffic a

PAN-ENT-OTC-ELA export classification

Hello,

could you pleasse let me know where I could find the ECCN of PAN-ENT-OTC-ELA?

thank you

Enquiry on SSL VPN Web Mode for Remote Users

Hi All,

Would like to enquire if upcoming there will be a feature release or route map on SSL VPN web mode for remote users.

The use case is as such:

• Users to connect and login to GlobalProtect Client from their endpoint
• After successful connectio

Stale SIP Sessions

Hello all,

We seem to have an issue with sip sessions being stuck in the session monitor for weeks and sometimes months.  There have been instances, albeit extremely rare, where it prevented new sessions from being formed on a sip trunk we were testi

Android Samsung update doesn't work

Hello everyone,

I can't solve the problem of updating Samsung smartphones running Android connected to the company Wi-Fi network.

I created a custom rule for mobile phone updates, but it still doesn't work. Everything is set to allow in the monitoring

FortiGate 501E & FG1101F equivalent Palo Alto model (below PA-5000)

Hello,

I am planning to migrate from Fortinet to Palo Alto.

Current firewall: FortiGate 501E Edge & DC

Current Firewall: FortiGate 1001F Edge & DC

Deployment: Enterprise edge
All security features enabled (IPS, App-ID, URL filtering)

I am looking f

KB KB5022661

Hello,

Does anyone have a Cortex XDR query to check if any endpoints and/or servers are missing Microsoft KB5022661.  Any assistance would be greatly appreciated

User Mapping -Server Montioring / AD -Access Denied

Hello All, 

In PA 440, the User Mapping – Server Monitoring was previously connected, but it is now showing “Access Denied.”