This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

SSL Decryption Causing Issues with Office 365

Currently working on a deployment with a few test users utilizing SSL decryption before it's rolled out to a wider user base. Decryption is working for the most part with the required exceptions in place, but having some issues with O365 apps no longer working after it was implemented. I had created an EDL and also explicitly added some Micros...

DJ_1924 by • L2 Linker
  • 69 Views
  • 3 replies
  • 0 Likes

[SOLVED] Prisma Access - Some Websites Are Unaccesible When Connects Only to Colombia Central Gateway

Hello, LiveCommunity team! I'm writing to share my experience regarding a web access error that occurs when our mobile users are connected to our "Colombia Central Gateway," which is deployed via SCM. When users connect to the "Colombia Central Gateway" and attempt to access the following websites: bancodeoccidente.com.cobancodebogota.com/person...

DanielSRomero_1-1793126043378.png

How to disable Telemetry?

How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...

2026-10-13_095412.png

Github EDLs missing IPs?

Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...

DecryptSSL Inboundwith SSL app no

I have just configured SSL Inbound for two servers and I'm seeing some unusual behavior. I can see random connections where the SSL "decrypted" flag is set to "NO" for SSL application. However, when the application is web browsing, it is always set to "YES".

Decrypt.jpg
BigPalo by • L4 Transporter
  • 121 Views
  • 1 replies
  • 0 Likes

Panorama SD-WAN Plugin Compatibility

Hello All! Seeking clarification on whether or not I need to upgrade my Panorama SD-WAN plugin. Currently, I am running PAN-OS 10.2.x and using SD-WAN plugin version 3.0.3. In the compatibility matrix the maximum PAN-OS version listed for this plugin version is "Latest". Does this refer to the latest version based on the minimal PAN-OS versio...

nohash4u by • L3 Networker
  • 85 Views
  • 0 replies
  • 0 Likes

Resolved! CSP Customer Support Portal Down for Maintenance – 23 October 2026

Hello Community, We are unable to access the Palo Alto Networks Customer Support Portal: https://supportcases.paloaltonetworks.com/ The portal displays the following message: “This website is down for maintenance. Sorry for the inconvenience. We'll be back shortly.” We observed this issue on 23 October 2026 at approximately 10:44 AM IST. Could a...

PA1420 HA Mode stucks in Initial (HA Initializing) mode for too long

HI All, We have an Active Passive PA-1420 which is connected together via H1-A and H1-B together. But when we restart the nodes or either of the nodes, the Passive PA stucks in Initial (HA Initializing) mode for too long. The last time i checked We restarted the devices at 12:25:00 and I last time checked 1:00:00 it was still in the same m...

I am looking for information about PAN-311601

https://origin-docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-10-known-and-addressed-issues/pan-os-12-1-10-known-issues PAN-311601 If the node is observed to be stuck with the “session clearing fault,” rebooting the node is the workaround to restore the node to an online state after all other fault conditions have been resolved....

n-tomo by • L2 Linker
  • 156 Views
  • 2 replies
  • 0 Likes

GlobalProtect Release for Ubuntu 26.04 LTS ?

Hello together.recently was the new Ubuntu 26.04 LTS release, until now the provided GlobalProtect client supports only Ubuntu 24.04:https://docs.paloaltonetworks.com/compatibility-matrix/reference/globalprotect/where-can-i-install-the-globalprotect-app?otp=linux#linux When can we expect the new GlobalProtect version for Ubuntu 26.04 ? Best re...

Palo Alto 1420 - Invalid username or password.

Dear all, We have face an issue recently with our Palo Alto HA pair. When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all. The only recent change we have implemented was the CIS Device H...

Resolved! Packet capture stops automatically

Is there any way to force Packet Capture to run for extended lengths? Since 11.1 PaloAlto has changed the underlying config and now forces packet capture to automatically end after 60 seconds. It's like no one at PaloAlto has ever used packet capture or had to track down an intermittent problem. The time limit can partially be increased with t...

Throttling ingress bandwidth on a sub-interface

Hi, I need to throttle 2 BYOD VLANs. On the Palos, they are configured as a sub-interface of aggregate ports. The QoS option will only accept physical interfaces or the aggregate port, not sub-interfaces to the aggregate port. Is there a way to accomplish this? There doesn't appear to be. More information all the firewalls are managed b...

CGoulard_0-1792425851588.png
CGoulard_1-1792425872118.png
CGoulard by • L1 Bithead
  • 132 Views
  • 1 replies
  • 0 Likes

PA-3440 VSYS license

Hello All, How can I to get additional virtual systems for my PA-3440? Is PAN-PA-3440-VSYS-10 the only valid license? Is there any other license with less VSYS available?BR Andrzej

  • 24474 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks