This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

How to block all AI-based applications

Hi Team, 1) We have a customer who wants to block all AI-based applications but the applications are not getting blocked.2) Initially, we created a application group policy in Security Policy and added all AI-based applications with action as deny. After commit the AI applications were getting blocked successfully. However, Claude AI was still a...

How to build SCM Managed NGFW with no management internet access

I am trying to deploy a Palo Alto VM-Series firewall and manage it with Strata Cloud Manager (SCM). The challenge is that I only have a single internet-connected port available in my cloud environment, while the management interface has no internet access. Ideally, I would like to keep the management interface private so that I can manage the fi...

Help with file blocking security profiles

Hello everyone, Let me say I am new to the live community, I am trying to figure out if possible to Block file downloads using the "File download" security profile. I enabled it added it to my in to out policy and it still downloaded the files. After doing some more research I found out that the "Allow HTTP partial response" is enable it w...

VPN Issues with SAP

I got intermitent connection affecting production PA-5220 VERSION 11.1.13 . Global protect 6.2.8-1045 troubleshooting : The VPN tunnel temporarily disconnected and routing entries associated with the tunnel were removed. The GlobalProtect client subsequently recreated and reconfigured the virtual adapter. A new IP address assignment was re...

F.Pinar by • L3 Networker
  • 33 Views
  • 0 replies
  • 0 Likes

Globalprotect for Android failing to connect

We're having an issue with GP where all other clients (Windows, Linux, MacOS, iOS) are able to connect with the exception of android devices. Users authentication successfully, get the MFA prompt from DUO, and then get this error: The network connection is unavailable or the gateway is unresponsive. Check the network connection and reconnect. ...

Failed Connection

Is anyone else seeing "Failed Connections" fire on iphlpsvc after [an agent/content update / IPv6 GPO change]? Did a specific content version introduce it? What's the recommended tuning approach here — an alert exclusion/exception scoped to iphlpsvc, or addressing the underlying network/IPv6 config so the failures stop?

sizing firewall

Hi,I am looking for a firewall for 3000 users, and 500 vdi access expecting approximately igb internet traffic Please help to size,Ho much throughput I needed Thanks

simsim by • L4 Transporter
  • 12639 Views
  • 7 replies
  • 0 Likes

the Maintenance support for Palo Alto Networks hardware components

In Japan, the maintenance support SKUs for the PAN-PWR-450W-AC (spare 450W power supply for PA-3400, PA-1400, ION 5200, and ION 9200) and the PAN-SFP-PLUS-SR (SFP+ form factor, SR 10Gb optical transceiver, 300m short reach, OM3 MMF, duplex LC, IEEE 802.3ae 10GBASE-SR compliant) are ZAPA-PWR-450W-AC-BS1 and ZAPA-SFP-P-SR-BS1, respectively.However...

Issue with the PANOS Version 11.1.4-h7

Hi Friends, We have a customer who is experiencing issues after upgrading their firewall to version 11.1.4-h7. The firewall is not functioning properly, with many websites being inaccessible and few customer reported a sudden spike in management plane usage. I suspect this could be due to a bug in this PAN-OS version, as multiple customers hav...

SSL Decryption Issue on PA-520 Running PAN-OS 12.1.7-h3

We are experiencing an issue with SSL decryption on a PA-520 running PAN-OS 12.1.7-h3. After enabling decryption, the firewall operates normally for approximately three hours. However, over time, the number of decryption failures gradually increases until all new connections are rejected. Disabling decryption immediately restores normal operatio...

Commit Failed

Hello , I am using a Palo Alto PA-5220 running software version 10.2.11-h12, and I am currently experiencing an issue with Commit Failed and Dynamic Updates. For the Antivirus/Threats dynamic updates, I have configured the schedule to Download, and the download completes successfully. However, the update is not being installed automatically. Cou...

Commit-Failed.png
Karaked by • L1 Bithead
  • 256 Views
  • 4 replies
  • 0 Likes

Panorama Using Groups in Policy

Hi Team, When i am trying to add the Group i dont see it as a group but as a User in the policy i am creating in the Panorama. May i know what could be the issue? Regards, Sanjay S

Resolved! Palo Alto blocks outbond cisco any connect traffic

Hi , i a new to Palo alto world. one of my user is trying to connect a VPN connection using anyconnect, but it not working when traffic is passing from palo alto, but when i access it from open internet it is working fine. Prompt response will be highly appreciated.

SachinA by • L0 Member
  • 7304 Views
  • 6 replies
  • 0 Likes

empty HIP after last Microsoft updates (09.2026)

Hi, Following the recent Microsoft updates KB5124008 and KB5126052, we have observed a significant issue with GlobalProtect’s operation, manifested by the transmission of empty or invalid HIPs. PANOS version 10.2.16-h6 (but also on 11.2.10-h13—I was in the middle of the update but rolled back to limit its impact). GP client version—primarily 6.3...

JacekL by • L2 Linker
  • 865 Views
  • 5 replies
  • 0 Likes
  • 24460 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks