PA1420 IKE packet disappear between receive (ingress) and firewall session state

Hi,

we have an PA-1420 Active/Passive HA-Cluster. Behind that Cluster we also use a Cisco FirePower 1150 as our VPN-Gateway, so IKE traffic (udp-500 and udp-4500) is passing our PA-1420. Our PA-1420 has to ISP connections for failover, both are ded

Wildfire False Positive on Detection of .XLSX extension

Wildfire False Positive on Detection of .XLSX extension

from Feb 24th,2026. In our organization started receiving wildfire alerts as information severity for the office extensions files for example. .xlsx files.

hash value : 6e81b1b3fc08fb5f481d8882

"Bugs" on Syslog Field Descriptions documentation PAN-OS 11.1+

I found a lot of "bugs": typos, missing fields, unstandarized naming, etc. in the Syslog Field Descriptions documentation PAN-OS 11.1+

All the inconsistencies are documented in https://github.com/enotspe/palos/blob/main/EDGE_CASES.md

Hopefully Pa

PA 5540 Deployment

I recently purchased a 5540 pair and plan on deploying them in the next few months swapping out a 5250 pair.  I'm curious if anyone has worked with the 5500s yet, or even PANOS 12.1?

Any comments or feedback you might have based on what you've seen

Do Palo Alto VMs support GCP N4 gve driver?

Dear community!

Do you know if Palo Alto VM series firewalls is compatible with Google Cloud N4 machine family??

With N4 family the dataplane interfaces type=gve are not recognized

> debug show vm-series interfaces all
Interface_name           B

Pre-processing script is not be able to get result from SearchIncidentsV2 command

Hi Community!

We're using XSOAR Version 6.0.

Our preprocessing script is not working as expected. 

We can't find exactly what causing this but we have a dev XSOAR instance and Prod XSOAR instance, the preprocessing script is working as expected in

Palo Alto Webinars

Hi,

I've attended two Palo Alto webinars:
- PAN-OS 10.1 Expert-Led Webinar on the 10th of February
- Live upgrade demo on the 18th of February

I was told we would be given the video recordings and slides from these webinars, but I don't know where they a

Badbox malware

Hi,

Our ISP keeps alerting us that we have a malware infection with something called android.badbox somewhere on our network but the source as they see it is our DNS server. They've provided the DNS query which they're seeing (for an A record) but we

Address Group and Tag limitations

The necessary firewall rules for each application are defined by labels.
If a workstation needs access to it, the label is requested and assigned (XML-API), so each Workstation has its own set of firewall rules. I tried implementing this requirement

Palo Alto - Barracuda IPsec VPN problems

We've a IPsec-VPN IKEv2 between Palo Alto (10.0.7) and Barracuda (8.0.5-0341) with 10 IPsec tunnels, one VPN-tunnel per subnet-pair, on Palo side "proxy IDs".

At least once every day, some of these ipsec-tunnels go down and can only be forced to come

Cortex - many aged-out connections on 35.244.133.254

Hello,
We are experiencing a high number of aged-out connections from our Cortex agents and brokers on 35.244.133.254.
When the connection is successful, the app-id traps-management-service is detected by our firewall.
Do you also encounter this behavio

how can we confirm if there is existing firewall rule or not in the policy by filtering by source and destination IP address and port numbers.

I can find existing firewall rule in the Firewall policy by searching by just source IP address or Just Destination IP address but our Firewall policy rule base is huge and i need to filter it by Source IP and destination IP address (both) and possib

Need help uninstalling Cortex XDR

Hi, I am looking to get help on uninstalling Cortex XDR from my personal machine. I have tried creating an account and opening a support ticket via https://support.paloaltonetworks.com/, however it just directs me to an error page

I do not have the un