This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Multiple Cortex XDR Agent Upgrades Failing with "The installer has timed out" Error

Hi team, We are currently encountering a mass upgrade failure across multiple endpoints during both Auto Upgrade and Manual Server Upgrade attempts. While a single endpoint successfully upgraded using our standard profile and group configuration, the remaining endpoints consistently fail. Issue Summary: Symptom: The upgrade tasks transition to...

Z.Zikri by • L0 Member
  • 18 Views
  • 0 replies
  • 0 Likes

Warning: External Dynamic List XXX is configured with no certificate profile

Hi all, I've been following this Article but I've run into an issue. When I try to edit an existing EDL and assign the Certificate Profile I created, the dropdown only shows "None (Disable Cert profile)" — the new certificate profile isn't listed as an option. However, when I create a brand new EDL, the certificate profile I created is available...

MaratP by • L0 Member
  • 128 Views
  • 1 replies
  • 0 Likes

PAN-OS Dark Mode

I am surprised there is not a Dark Mode. I have seen comments on using CLI and other Third Party apps to change, This can effect how the GUI is viewed. I have noticed when doing this with other apps you can miss critical info. I would say this is a feature add that needs to be made. I have issue with my eyes that the bright background makes it h...

Resolved! Wildfire Malware detected miniwallet.bundle.js as Malware, VirusTotal does not list it

Hey we are using Cortex XSIAM and have been getting alerts on miniwallet.bundle.js apparently during MS Edge updates.From what I can see the Wildfire Verdict has changed yesterday. However, reading the report, I cannot explain why it is considered Malware. Googling also did not get me any further.Most interestingly: On VirusTotal the correspon...

PAN-OS 12.1.X Firewalls & Panorama Managed

Just a heads up to the community apparently there's an issue with firewalls that are 12.1.X that are configured to be managed from Panorama. Apparently PAN-322826 exists where any hardware that's Panorama managed can spontaneously suffer a hardware reload due to a "configd" memory leak. (A 4 months long case finally got us this info.) To my k...

Resolved! EDL server certificate authentication failed. A local copy of associated external dynamic list will be used

Since Saturday 7/12/2026 I've started receiving these messages on our firewall every few minutes. eventid: tls-edl-auth-failureobject:fmt: 0id: 0module: generalseverity: criticalopaque: EDL server certificate authentication failed. A local copy of associated external dynamic list will be used, so it won't impact your policy. EDL Name: Cortex I...

Resolved! [SOLVED] Prisma Browser Issue "No upstream gateways available & GlobalProtect/Remote Networks Push Jobs Fails Continously"

Hello LiveCommunity Team! I created this post to share my experience regarding some Issues that recently seen on the Prisma Browser and Mobile User GlobalProtect pushed failing multiple times!We had configured Prisma Browser alongside GlobalProtect—deployed via Strata Cloud Manager (SCM) to work seamlessly; however, a few days ago, we began seei...

DanielSRomero_0-1783546154021.png
DanielSRomero_1-1783546483912.png
DanielSRomero_2-1783546809140.png
DanielSRomero_3-1783547353425.png

Site to site VPN between PA & Azure || Failover / HIgh availability

We have configured two Site-to-Site VPN tunnels between our Palo Alto firewall and Azure VPN Gateway to provide redundancy and high availability. However, we are encountering an issue where we are unable to keep both VPN tunnels active simultaneously: When both VPN tunnels are up, connectivity between our on-premises environment and Azure becom...

PA 5540 Deployment

I recently purchased a 5540 pair and plan on deploying them in the next few months swapping out a 5250 pair. I'm curious if anyone has worked with the 5500s yet, or even PANOS 12.1? Any comments or feedback you might have based on what you've seen so far.

Deny authorization request for '_telemtryuser'

The other night I got a system alert email with the following message (truncated for obvious reasons): type: SYSTEMsubtype: generalmodule: generalseverity: highopaque: Deny the authorization request for the admin user thru CLI, '__telemetryuser' from 'Console or telnet' I found the article regarding the existence of _telemetryuser (https://kno...

P.Betts by • L0 Member
  • 90 Views
  • 1 replies
  • 0 Likes

Captive portal reauth

Im using captive portal in Palo Alto and each 3-4 hours i receive this: I need to reauth. Why is happening this? any timeout o cookie? where should i check?

Captura de pantalla 2026-07-02 132032.jpg
BigPalo by • L4 Transporter
  • 154 Views
  • 3 replies
  • 0 Likes

policy on AI responses?

Does PAN have a policy, a community rule with respect to copy-pasting of AI responses when responding to questions? If not - no restriction on drive-by AI-generated walls of text (more often irrelevant, sloppy, or even plain wrong - than not)? (To my 👀, one of the biggest challenges with both AI and human responses is insufficient context - a...

captcha carpet bombing

Keep getting these repeatedly - often during the same login session. Can anything be done on my side? Can anything be done on the back end? 🙏 (If not - can we do away with stoplights, buses, crosswalks, bridges and boats? Something a little more... I don't know - serene? Like oaks, birds, cats and dolphins? 😏😆) (The login is through CSP S...

permafrost_0-1783521153492.png

Resolved! handle (username) change?

How do I change my "handle" (username shown top right of the page, aka profile name)? I believe the profile was auto-registered via CSP / SSO. Don't see an option to update it on my own. I do have another personal profile and don't want to merge them. The change is privacy-related. Thanks!

Resolved! I can't perform a dynamic update on the PA-460

Hi,When I ran “Device > Dynamic Updates > Check Now” on the PA-460, the following error was displayed.Failed to check Content upgrade information due to an invalid SSL peer certificate or SSH remote key. Please check network connectivity and try again. Failed to check IoT upgrade information due to an invalid SSL peer certificate or SSH re...

  • 24406 Posts
  • 123 Subscriptions
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks