This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PA1420 HA Mode stucks in Initial (HA Initializing) mode for too long

HI All, We have an Active Passive PA-1420 which is connected together via H1-A and H1-B together. But when we restart the nodes or either of the nodes, the Passive PA stucks in Initial (HA Initializing) mode for too long. The last time i checked We restarted the devices at 12:25:00 and I last time checked 1:00:00 it was still in the same m...

I am looking for information about PAN-311601

https://origin-docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-10-known-and-addressed-issues/pan-os-12-1-10-known-issues PAN-311601 If the node is observed to be stuck with the “session clearing fault,” rebooting the node is the workaround to restore the node to an online state after all other fault conditions have been resolved....

n-tomo by • L2 Linker
  • 83 Views
  • 2 replies
  • 0 Likes

Testing CIE and user-id mapping question

Hi everyone, We currently use LDAP on our NGFW, with User-ID mappings coming from the Windows User-ID Agent and GlobalProtect. We’re looking at moving to CIE, as we plan to move away from on-premises AD in the future. Can CIE be configured alongside our existing LDAP setup so we can initially test it with only a specific Microsoft Entra ID group...

GlobalProtect Release for Ubuntu 26.04 LTS ?

Hello together.recently was the new Ubuntu 26.04 LTS release, until now the provided GlobalProtect client supports only Ubuntu 24.04:https://docs.paloaltonetworks.com/compatibility-matrix/reference/globalprotect/where-can-i-install-the-globalprotect-app?otp=linux#linux When can we expect the new GlobalProtect version for Ubuntu 26.04 ? Best re...

When connected to GP the internet connection goes to about 1meg

We have something of a sporadic issue. When some users connect to the VPN with GP their throughput drops to about a meg. It's just a handful of users. My home ISP, Metronet works just fine, a user a few miles away, also Metronet has this slow down so bad it's not usable. It's not just Metronet, we have seen this on AT&T and several other ISP...

How to disable Telemetry?

How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...

2026-10-13_095412.png

Palo Alto 1420 - Invalid username or password.

Dear all, We have face an issue recently with our Palo Alto HA pair. When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all. The only recent change we have implemented was the CIS Device H...

Resolved! Packet capture stops automatically

Is there any way to force Packet Capture to run for extended lengths? Since 11.1 PaloAlto has changed the underlying config and now forces packet capture to automatically end after 60 seconds. It's like no one at PaloAlto has ever used packet capture or had to track down an intermittent problem. The time limit can partially be increased with t...

Throttling ingress bandwidth on a sub-interface

Hi, I need to throttle 2 BYOD VLANs. On the Palos, they are configured as a sub-interface of aggregate ports. The QoS option will only accept physical interfaces or the aggregate port, not sub-interfaces to the aggregate port. Is there a way to accomplish this? There doesn't appear to be. More information all the firewalls are managed b...

CGoulard_0-1792425851588.png
CGoulard_1-1792425872118.png
CGoulard by • L1 Bithead
  • 101 Views
  • 1 replies
  • 0 Likes

PA-3440 VSYS license

Hello All, How can I to get additional virtual systems for my PA-3440? Is PAN-PA-3440-VSYS-10 the only valid license? Is there any other license with less VSYS available?BR Andrzej

Guidance on Getting Started with Enterprise DLP Testing for PII/PHI Protection

We recently deployed a Palo Alto Networks firewall and, as part of the implementation, received 200 Prisma Access licenses. I also requested an Enterprise DLP license for evaluation/testing, which has now been activated. Currently, we have access to the following components: Strata Cloud Manager Strata Logging Service Enterprise DLP Data Securi...

Traps For Expired Certificate

I am on 11.1.13 Does the NGFW or Panorama have traps for expiring or expired certificates? (Used for mgmt access and secure communications channel) I the trap below in MIB file for 11.1 however it does not seem to be triggering when certificate expires. .1.3.6.1.4.1.25461.2.1.3.2.0.3220 panTLSCertificateExpiredTrap

nahiar by • L1 Bithead
  • 241 Views
  • 2 replies
  • 0 Likes

Resolved! Cortex XDR Agent Error: "Failure to register to Windows Security Center - agent works alongside Defender" on Windows 11 Workstation

Hi Community, I am encountering a status warning in the Cortex XDR Console for several endpoints and would appreciate your guidance. Status/Error Message: "Windows Security Center Integration status – Windows: Failure to register to Windows Security Center – agent works alongside Defender" Environment Details Operating System: Windows 11 Pro...

PANOS Integrated UserID with WINRM

Hello, I am trying to configure PANOS(10.1.8) Integrated UserID with Wndows AD 2016 (with Kerberos). I am getting "Access Denied" status under User Mapping --Server Monitoring I have validated that user is part of below security groups on AD Distributed COM Users Event Log Readers Remote Management Users Server Operators I see below log...

Clarification on Strata Logging Service and eDLP Log Forwarding

Hi Team, We are an MSSP and have received a request to support eDLP. Since we do not have access to these devices/services in our environment, we primarily rely on the available documentation to understand and support them. I have a few questions regarding how Strata Logging Service (SLS) works. We currently support Prisma Access using SLS. Wh...

  • 24472 Posts
  • 125 Subscriptions
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks