General Topics

Unique Threat ID: 85253 increase in false positives since last update

Hi there,

Has anyone noticed an increase in false positives with Unique Threat ID 85253 since the update 8971 (2025-04-28 UTC)?

We are experiencing a rise in false positives but haven't opened a ticket yet.

Thanks,

Daniel

Outbound SQL traffic (possibly) hitting a zone protection profile

We have a process that sends MSSQL (1433/tcp) to a cloud service that occasionally just stops working - so trust to untrust. It is mostly on 'larger' data transmissions. Turned off all the flood protection in the zone protection profile on the outsid

Custom Logs / Path Monitor Alert

Hello!

I may be trying to do something impossible, but it seems like the configuration elements are all there.  We have a static default route to our ISP that is set with path monitoring so that we failover to a backup route when the gateway is unr

Global Protect application blank screen

Hello Members,

Can anyone help me to solve the global protect blank screen issue on my PC, as for others it normally works fine.

I am using Windows 11 and I have already removed and re-installed the GP App but still it shows a blank screen and I

resources-unavailable for DNS-base traffic

Model: Palo Alto PA-3420
Software version: 11.2.4-h1

Most of our dns-base traffic has the "session end reason" resources-unavailable suddenly. We're also having trouble loading webpages. The resources-unavailable reason is only on DNS-base traffic a

PVLAN

Hello. I've been trying to use PVLAN with palo alto. I have two isolated host which are on the same subnet and wanted them to communicate through palo alto. I was able to manage with a switch using local proxy arp but from what I've searched palo alt

External Web Proxy

Hi.

Have someone working with next hop fwd proxy ? 

I need post firewall solution for additional files types blocks (like Trellix)

Is there an off the shelf power supply for the PA-450R?

My PA-450R did not come with a power supply and has the phoenix connectors for connecting power to it. Is the an off the shelf power supply that is recommended for this unit or will I need to supply my own power?

ECMP breaks secure email access.

Hi all, 

while using ECMP for the last 2 years without any issues using 3 ISP's with different weight and enabling Symmetric Return and Strict Source Path, I found that some sites with authentication access and Proofpoint secure emails access are bei

Support PAN-OS Software Release Guidance

The change to the Support PAN-OS Software Release Guidance

are useless for anyone not on the preferred release. I dont need to know what the current preferred release is. i can get that on the PAN in the software section and setting a checkmark How d

The PA-220 is unable to boot into the system.

As stated in the subject, I encountered an error during boot-up. The details are as follows:

SPI ID: ef:40:18:00:00
header found at offset 0x1d80
Image 1.2: address: 0xffffffff81000000, header length: 192, data length: 8160
Validating data...
Starting nex

Custom URL Issue

Hi all,

I had an issue where a client created a Custom URL category with multiple of URLs and added it in a Security Rule, all of the URLs specified in that custom category is matching except one URL with wild card such as *.sometechnologies.com.

I'm

HIP Check for Machine Certificate

Hello,

I've been unable to get my HIP check to work when checking for attributes in a machine certificate.  Other HIP checks do work.  I'm using my root cert for the Certificate Profile.  I don't have/use a intermediate cert as this is a lab.  Some of

Person Vue exam error

Hi,

for the last week I tried to the Palo Alto SSE and the PCNSE and I get an error (see attachment).

does anybody knows about problem with PersonVue exams online?

thanks

Global Protect lose internal resources access

Hello everyone,

I hope you can help us. We have some users who are connected to global protect, but from time to time, they lose access to the internal resources. When this happens, they have to update the connection in the GP client to be able to ac