User-id ip mapping issue

Hi all

my customer having problem with user-id

I am trying to solve this issue but not working, so I need help

Customer divice pa-3410 panOS10.2.9 connection with microsoft Active-directory 2012R2(not sure)

Its agenteless user-id, winrm http,

ospf neighbour adjacency is flapping continuously

Hi Team,

Reaching out for help to identify the main cause of this problem.

I can see that the OSPF adjacency is flapping continuously and I have no clue how to move further and how to identify the cause.

While collecting the routed.log, I can s

Palo Alto and Microsoft NLB multicast

Hi

I have an issue to contact the VIP of our Microsoft NLB.

We have a cluster of 2 PA-1410 (active/passive). On this cluster, I configured interface aggregate with sub-interfaces with ID vlan (ex :vlan10, vlan 50, vlan193..). Each IP of the interfa

Checkpoint Firewall migration to Palo Alto firewall using Expedition Tool

Hi Team,

We want to migrate the Checkpoint firewall with Palo Alto NextGen Firewall using Expedition Tool. I've gone through couple of forums also few of them listed on this community as well but I don't get more appropriate way to do this migratio

Detect high bandwith consumption

Hello everyone!

I´m looking for a way to identify a user or IP when they have high bw consumption

Lets say a user is downloading something and is using all my ISP bw, how can I identify it in that moment?

I was able to do this but when the session

Global Counters if packet is dropped by QOS

Hi,

Is there any global counter that might indicate if my session is beeing dropped by QOS?

I have an issue where my BGP connection to prisma access drops but the tunnel to prisma access is always up.

The issue is intermittent.  

If i would setup a

PAN-OS 10.2.9-h9 release notes and CVE-2024-3400

The addresses issues listed in the release notes ( 1/8/24) for PAN-OS 10.2.9-h9 state: 

PAN-252214 A fix was made to address CVE-2024-3400.

However this was previously stated as fixed in 10.2.9-h1.

Is this 'duplicate reporting' or does this address

Does column "PA-7000-100G-NPC-A" mean that it also performs "DPC" firewalling tasks or does it only perform network tasks such as routing and...?

In the picture that I have put of the 7000 firewall
Does column "PA-7000-100G-NPC-A" mean that it also performs "DPC" firewalling tasks or does it only perform network tasks such as routing and...?

-----------------------------------------------------

Force URL-Filter if GlobalProtect is disconnected

Hi together!

Is there a possibility to force a client to use a (local/cloud) URL-Filter if the Global Protect Client is NOT connected to the gateway?

Enforce Global Protect connection / define 40 FQDN exceptions is not really a solution.

Maybe th

PA-445 on PAN-OS 11.1.2-h3

First time posting so please bare with me.

Currently running into an issue that looks like a potential bug or an issues specifically with the PA-445 model (Support Case has been submitted and is in the works; but we'll see what happens) Two differe

BGP Route Advertisement /Export Rule

Need some help with advertising specific routes over BGP and hoping someone can help.

I have a site-to-site tunnel setup between AWS and my on-premise PA Firewall. I am receiving routes from AWS over BGP as expected. No issue there and I am able to

QOS issue error

any idea on below error.

Enviorment:-
OS - 10 2 8 h2
Model - 5220

2024-07-29 19:25:19.349 +0800 Error: gryphon_qos_perform_set(5200/gryphon_sysd.c:389): Set shaper on port 42 index 0 failed with ret -4