NGFW admin account is locked. What should I do?

Hello all,

I received a report that I couldn't log in to my GP account. Upon checking my firewall, I discovered that the admin account was also locked, blocking GUI/CLI access.

Q1. Is there a connection between the GP account and the admin accoun

Chatgpt enteprise login only

How are people policing logins to Chatgpt for enterprise only logins?

https://help.zscaler.com/zia/adding-tenant-profiles

Zscaler does it.   

Palo does it for microsoft.....

How are people doing this with decryption and Palos native app id, NOT the ACE s

Kerberos SSO Admin with 2 devices

Hi,

I have 2 devices running in active-passive HA. 

I want to use kerberos SSO for the admin ui. 

with one device it is working, but how can i add a second spn?

make image of PA_3220

Hello,

just need to get confirmed - that make an image of a physical PA-3220 is not doable !

I have had questions about that - but my common sense says that cannot bed done  - or am i wrong ?

API Endpoint to retrieve object usage?

Hi

I'm looking for a endpoint to check if a object is used (a bit like "Global Find from the GUI). Does it exists?

For now, i have a script that retrieve all address.

Thanks

Regarding the Operational Specifications for HA Mode

I am reviewing the operational specifications for HA mode. Could you please clarify the following points?

<Device Information>
Model: PA-3420 (2-unit HA configuration)
OS Version: 11.1.6-h10
Interface Information: Onboard (2 ports), Optical SFP10G (3

How to Patch Vulnerability - Plugin 43160 (CGI Generic SQL Injection) on GlobalProtect

Tunnel Monitoring

Hello Team,

I have two ISP for site A and site B. we have configured tunnel.1,2,3,4. for all the tunnels i configured tunnel monitoring for failover.

 My primary tunnel is up and working fine. However, all the backup tunnels are down the tunnel sta

web file blocking

Hello Community,

We are trying to implement file upload/download blocking for W-Web in our environment using a Palo Alto firewall.

Current setup:

SSL Forward Proxy decryption is enabled.

A decryption certificate has been created on the firewall and insta

GlobalProtect enforcer exceptions not staying in registry

We have GlobalProtect with "Enforce GlobalProtect" enabled and a set of IP and FQDN exclusions. Additionally, the captive portal exception timeout is configured to 900 seconds. However, we’ve encountered an issue when users are connected to GlobalPro

Need quote for Firewall PA 440

Need price for firewall PA-440

Palo alto type of license subscription

Hi,

May i know type of security subscription license module.

How we can define the requirement for inside office and outside network traffics.

Thanks

User-ID Redistribution Agent : Close Connection to Agent

I am getting high severity alerts for user id connection agent Failure - Redistribution Agent <Agent Name> (Vsys1):Close Connection to Agent. Would appreciate if anyone can help me understand the log to check if the issue occurred due to firewall or