This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Start a conversation

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4691 Views
  • 0 replies
  • 1 Likes

IP List limitations

We would like to integrate with AbuseIPDB after seeing numerous global protect VPN logon failures. We've greatly slowed this process down but it was a manual process of pulling reports to a list and we have an EDL download this list on a regularly scheduled basis.Instead of a manual process, we were going to with Panorama API key and scripting ...

ksauer507 by • L3 Networker
  • 2121 Views
  • 2 replies
  • 0 Likes

Shared Folder Credential Problem with NAT

Hi team, We have a problem with a shared folder, the problem is:Client 21.172 connects to 21.174 through a shared folder, without credentials.When NAT is activated, and the same shared folder is opened, it asks for credentials, and does not allow the connection. FW PAN: PAN-445 SO 11.1.4-h7 The Security Policy is configured any in services a...

Clientless VPN issues

The customer is experiencing issues with the clientless VPN on PAN-OS 11.1.5-h1. Previously, on version 11.1.3, it was working smoothly. The issue occurs when the customer tries to log in to the GlobalProtect portal—it redirects to the clientless VPN portal. However, this behavior was not observed on version 11.1.3, where it was functioning prop...

Service l3svc restarts in loop on PA-1410

Hello, In my new PA 1410 I've noticed that the l3svc service restarts in a loop.The PA-1410s are in version 11.1.4-h7I restarted the l3-service ( debug software restart process l3-service ) with no change. Also restarted the mgt plane (also the firewall) but I continue to see this in system log : 0 l3svc: Exited 4 times, waiting 210 seconds t...

Mamoudou by • L2 Linker
  • 653 Views
  • 0 replies
  • 0 Likes

URL filtering response Page

Hi Friends, We have a requirement regarding the URL filtering response page. Currently, when a URL is blocked due to a predefined or custom URL category, the URL blocked response page is displayed. However, if the traffic is denied through the QUIC protocol, the predefined URL response page does not appear. Is it possible to display the URL fi...

Satyak by • L3 Networker
  • 1188 Views
  • 1 replies
  • 0 Likes

Resolved! New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com

Maybe I'm just low on sleep, but something doesn't seem to be lining up here. Had a power outage over the weekend and am now getting these High severity system notifications from a PA440 about every 10 minutes. > CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com, Reason: self signed certificate...

How to check temperature sensors from GUI

Hi, I was wondering if it is possible to check the temperature sensors of a Paloalto PA-220 firewall from the GUI. I have seen that it is possible to check via the CLI, but I do not have immediate access to the CLI and was wondering if it could be done through the GUI. Thank you in advance

GRC_INF by • L0 Member
  • 2352 Views
  • 1 replies
  • 0 Likes

User-id agent Servicer connection using Kerberos

Hi Our Palo NGFW connects to AD servers using Kerberos as part of the user-id feature. We have received advisories from other networking partners that MS is applying a change in the way it enforces certificate based authentication - KB5014754. Does anyone know if or how this may affect the user-id authentication on the Palo? Any advice on how ...

Joe_Ng by • L1 Bithead
  • 695 Views
  • 0 replies
  • 0 Likes

Byte swapping needed on packet captures taken from tunnel interfaces

I noticed something odd with packet captures taken involving traffic originating from a tunnel interface (used for GP VPN clients) where the Ethernet Type header was byte swapped. Meaning instead of 0x0800 it was 0x0008. The screen snips illustrate the raw exported packets from a NGFW running 11.1.4-h1. Wireshark 4.4.3 with no packet dissector/d...

Resolved! Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

Hello Community, I'm looking into integrating Okta's Multi-Factor Authentication (MFA) with GlobalProtect SSLVPN. May I know is the OKTA MFA is free for Palo Alto firewall global protect SSLVPN. Can anyone confirm if Okta's MFA is indeed free when used with GlobalProtect? If so, could you point me towards any official documentation, guides, ...

GWong4 by • L2 Linker
  • 3513 Views
  • 5 replies
  • 0 Likes

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4691 Views
  • 0 replies
  • 1 Likes
  • 1607 Posts
  • 61 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks