End users selects DENY on the MFA prompt on the phone still are able to connect to GlobalProtect agents

I need some advices on this GP VPN Client with MFA issue: 

End users selects DENY on the MFA prompt on the phone still are able to connect to GlobalProtect agents

The current auth environment is that users use Active Directory in Azure  for MFA and u

PA3430 OID Solarwinds

Below OID for Solarwinds do not work for PA3430 10.2.8 - Does anyone knows the updated ones?

PA_hrProcessorLoad_DataPlane

PA_hrProcessorLoad_MgntPlane

panSessionActive

Thanks

Jeff

Palo Alto VM GCP not using ssh key and forcing password authentication

I have tried multiple BYOL images in Google Cloud and re-generate SSH keys.   It keeps asking to authenticate the admin user with no known passwords.   It's ignoring the keys I guess.   Is there something missing from my config when I deploy via Terr

Issue with GP Access for JIO Users on PA-820

Dear Friends,

One of our customer is facing an issue with users on PA-820. According to the customer, many users are connecting to the internet via mobile hotspot using JIO SIM cards. While they can successfully connect to GlobalProtect, but they a

Block Exchange ECP externally

Hello team,

We are experiencing with our hosted exchange server on the cloud. Despite efforts from our Server team to block ECP access from external networks, it remains accessible. The team has suggested blocking ECP for external networks only.

I

API error messages

Hi all

This error message keeps coming up:

The latest API KeyGen was executed on <date and time> with the deprecated algorithm. You are advised to configure the more secure API key infrastructure by web interface: Setup -> Management -> Authentia

Can't manage Cortex XDR on my personnal computer

Hello,

I don't know how Cortex XDR ended up on my personnal computer but i would like to remove it since it prevents Battleeye to start.

The "default password" Password1 won't work on my client.

Could you please provide me this famous "XdrAgentCleane

Does Intel HD Graphics Impact the Performance of Palo Alto Networks' Security Solutions?

Hi everyone,

I’m curious about how Intel HD Graphics might affect the performance of Palo Alto Networks' security solutions. While these solutions typically rely on CPU and RAM, could the integrated GPU impact graphical tasks, especially in the fol

SSL Decryption: Forward Trust unavailable

Hello,

After creating a external CA cert, the Forward Trust Certificate, Forward Untrust Certificate and Trusted Root CA are greyed out.  So I can't select.

All options are available when a create a self-sign certificate.  

Any idea?

Thanks

Join Us For a Fuel Workshop on GlobalProtect Troubleshooting Techniques (APAC Region Sept 17-18)

RSVP for this event now!

Fuel Workshop on GlobalProtect Troubleshooting Techniques

We are pleased to announce a new series of Fuel Workshops! Over the next two days, we will be going over several components of the NGFW and allowing the attend

SD WAN using loopback on Palo Alto

I configuring a HUB for SDWAN with vpn, however this firewall currently have vpn tunnels to 3rd parties.  Due to this I am planning on using a separate wan ip for sd-wan.  However I do not have free ports on my firewall for this.  Is it possible to c