Server-Monitoring shows Authentication-failed or Connection refused error

We are using WinRM-HTTPS protocol  in the Agentless User-ID configuration, when connecting to the Domain Controller(s) firewall is using the default port as 88. Palo-Alto firewall version is 10.2.3-h4 .

Server-Monitoring shows Authentication-failed or

10.0.10 code bug? LDAP auth server is up !!!

Since upgrading to 10.0.10, we've been getting system medium severity messages on our active firewalls that "LDAP auth server xxxx.xxx.xxx is up !!!".  We never receive a down message though.  We're not experiencing any issues with LDAP which makes m

Verdict "malicious" and action "allow"

Hi team

We are detecting some files with Verdict "malicious" and action "allow"

Can anybody help us for change the action or other solution?

Regards

Palo Alto's stance on CVE-2024-3661

Does PA have a response to CVE-2024-3661 for it's GlobalProtect users?

Temporarily disable SSL decryption

Hi

I was wondering if anybody knew if the temporary disable SSL decryption is actually broken or it is my firewall, I needed to switch it off as I was having issues getting to sso.paloaltonetworks.com (which oddly is not covered by exclusion list)

SAML Authentication Profile not popuating IdP Server Profiles

I am trying to configure a SAML Authentication Profile but the IdP Server Profile is not populating with my Imported SAML Metdata Identity Provider. When I click import on the page it imports another profile but still does not show up. Any ideas?

N

Application Command Center (ACC) - Source Regions Map not working

Hello everyone,

not sure about this, but my Source Regions map in ACC is not working, not showing up anything, no colours:

When I over over the countries it will just be shown in orange, but I can't click or do anything. Also all countries a

WEBUI Session Timing Out

Hello,

On my PA-820 I started getting the idle timeout message below:

"Your login session has expired and you have been logged out for security reasons. Please log in again if you wish to continue."

Normally this was never an issue and I simply logge

Dynamic content update error-Panorama

Hi Team

Iam getting an error while chcek in to the dynamic content update in my panorama.

Error message is as this 'Failed to check WF-Private content upgrade info due to unsupported protocol.Please check network connectivity and try again'

Iam

Routing logs

Hello...

I have a question regarding default static route logs.

We 2 ISP links configured with path monitoring at default settings (Failure Condition=Any, Preemp HT=2min, PI=3 & PC=5)

As seen in the attached logs, there are alternate path-monitor-fai

Global Protect agent background is invisible on some external displays

We've recently gotten reports of two different Macbook Pros running Sonoma with external displays where the GP agent background is invisible / transparent.  The app seems to be working fine, but on certain external displays, it's difficult to use bec