This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Start a conversation

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4787 Views
  • 0 replies
  • 1 Likes

Clientless VPN issues

The customer is experiencing issues with the clientless VPN on PAN-OS 11.1.5-h1. Previously, on version 11.1.3, it was working smoothly. The issue occurs when the customer tries to log in to the GlobalProtect portal—it redirects to the clientless VPN portal. However, this behavior was not observed on version 11.1.3, where it was functioning prop...

Service l3svc restarts in loop on PA-1410

Hello, In my new PA 1410 I've noticed that the l3svc service restarts in a loop.The PA-1410s are in version 11.1.4-h7I restarted the l3-service ( debug software restart process l3-service ) with no change. Also restarted the mgt plane (also the firewall) but I continue to see this in system log : 0 l3svc: Exited 4 times, waiting 210 seconds t...

Mamoudou by • L2 Linker
  • 696 Views
  • 0 replies
  • 0 Likes

URL filtering response Page

Hi Friends, We have a requirement regarding the URL filtering response page. Currently, when a URL is blocked due to a predefined or custom URL category, the URL blocked response page is displayed. However, if the traffic is denied through the QUIC protocol, the predefined URL response page does not appear. Is it possible to display the URL fi...

Satyak by • L3 Networker
  • 1257 Views
  • 1 replies
  • 0 Likes

Resolved! New error after power outage event: CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com

Maybe I'm just low on sleep, but something doesn't seem to be lining up here. Had a power outage over the weekend and am now getting these High severity system notifications from a PA440 about every 10 minutes. > CloudAuthService Server certificate validation failed. Dest Addr: license.api.paloaltonetworks.com, Reason: self signed certificate...

How to check temperature sensors from GUI

Hi, I was wondering if it is possible to check the temperature sensors of a Paloalto PA-220 firewall from the GUI. I have seen that it is possible to check via the CLI, but I do not have immediate access to the CLI and was wondering if it could be done through the GUI. Thank you in advance

GRC_INF by • L0 Member
  • 2560 Views
  • 1 replies
  • 0 Likes

User-id agent Servicer connection using Kerberos

Hi Our Palo NGFW connects to AD servers using Kerberos as part of the user-id feature. We have received advisories from other networking partners that MS is applying a change in the way it enforces certificate based authentication - KB5014754. Does anyone know if or how this may affect the user-id authentication on the Palo? Any advice on how ...

Joe_Ng by • L1 Bithead
  • 748 Views
  • 0 replies
  • 0 Likes

Byte swapping needed on packet captures taken from tunnel interfaces

I noticed something odd with packet captures taken involving traffic originating from a tunnel interface (used for GP VPN clients) where the Ethernet Type header was byte swapped. Meaning instead of 0x0800 it was 0x0008. The screen snips illustrate the raw exported packets from a NGFW running 11.1.4-h1. Wireshark 4.4.3 with no packet dissector/d...

Resolved! Palo Alto Firewall Global Protect SSL VPN MFA OKTA Integration

Hello Community, I'm looking into integrating Okta's Multi-Factor Authentication (MFA) with GlobalProtect SSLVPN. May I know is the OKTA MFA is free for Palo Alto firewall global protect SSLVPN. Can anyone confirm if Okta's MFA is indeed free when used with GlobalProtect? If so, could you point me towards any official documentation, guides, ...

GWong4 by • L2 Linker
  • 3701 Views
  • 5 replies
  • 0 Likes

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4787 Views
  • 0 replies
  • 1 Likes

GlobalProtect Machine based Certificate Access

Hi Long time listener, first time caller. Since we have so many brute force attacks with GlobalProtect lately, I wanted to do machine based GlobalProtect Certificate access. Meaning we use a third party Certificate server within our environment to create Certificate and I assume this server would also be Root CA. Then push cert to all devic...

Resolved! Virtual IP for Management Interface

I have two firewalls in an HA configuration. I need to be able to have one "virtual" ip address for the management interface of the active firewall. For instance: Firewall1 IP is 192.168.1.10 Firewall2 IP is 192.168.1.11 Virtual Address 192.168.1.9 points to 10 or 11, whichever one is active. Has anyone else accomplished this and how did you do...

  • 1633 Posts
  • 62 Subscriptions
Top Solution Authors
View All
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks