Palo alto sdwan dia Saas profile issue

Recently we have enabled SDWAN DIA setup in the firewall without the Panorama, all the routing and link switchover works fine as expected.

However we ran into the issue now, we have saas profile probing cisco.com using https when the cisco.com was no

Policy configured with Application ID but sarda cloud saying I need to configure services as well ?

Hi everyone,

I have my policies configured with the Application ID, and I’ve set the service to "any" because some applications use random ports.

However, Strata Cloud is recommending that I configure the services explicitly as well.

I was under the

Failed to Validate Client Certificate" Error with User ID Agent

Hi Community,

We’re encountering an issue with our Windows-based User ID Agent installed on the server. Specifically, we're receiving the error message: "Failed to validate client certificate: No connection found."

Here’s what we’ve tried so far to r

Upgrade PAN-OS from 10.1.10-h5 to 10.2.10-h9

Hello team, I am asked to update the PA-5220 Firewall through Panorama, the FW are in HA.
The requested update is PAN-OS from 10.1.10-h5 to 10.2.10-h9.

How many jumps does it require?

Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

Hello folks,

I am not sure when this happened but I suspect it when we upgraded to PAN-OS 11.1.3.

On my PA-3250 when I go into Network > IPSec Tunnels in PAN-OS, and then click either IKE Info or Tunnel Info, I am no longer able to restart the connec

DNS Failover Service

We are testing a 3rd party DNS failover service and they need a way to verify if our ISP is up.  My thought on this was to allow ping/icmp on our external nic from the vendor's public IP range, however that isn't an option.  We could allow http/https

Inbound Policy-Based Forwarding Issue - Intermittent loss of connectivity

Hello,

Got a strange one, that I am hoping someone with deep knowledge of PBF and symmetric return can advise on.

We have two (2) virtual-routers due to two different ISPs.  The history of it is we are migrating off of one ISP to finally decommis

SD-WAN Traffic Control from the Hub Side

Hi Guys,

our Palo Alto on the HUB side is equipped with a single 10G uplink interface. On the Spoke side, there are three uplinks with varying bandwidths, and in this setup, the Panorama SD-WAN plugin generates three IPsec tunnels. I can manage traff

Palo Alto Mock server for API testing

Hi Support,

We are developing a API connector to pull Traffic logs from Palo Alto firewall.
Do you guys have any mock server to test the rest API?

Where to check Threat IDs?

Hi Guys,

I was reading this article https://security.paloaltonetworks.com/CVE-2024-0012.

Per the article, 'Additionally, if you have a Threat Prevention subscription, you can block these attacks using Threat IDs 95746, 95747, 95752, 95753, 95759, and