This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.
About Next-Generation Firewall Discussions
Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. Ask your questions or provide insightful answers in the discussion forum specific to NGFW.

Discussions

Start a conversation

Welcome to the Next-Generation Firewall Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by • Community Team Member
  • 4863 Views
  • 0 replies
  • 1 Likes

Need Policy for MS System Center

Dear All Need help. Recently, we have observed that the Palo Alto firewall shows an alert on the dashboard when a Microsoft System Center user tries to scan and push updates from their workstation. This is routine work for some support users. If it happens regularly, we report this alert and inform higher management why it happens. But it doesn...

rockbd by • L0 Member
  • 97 Views
  • 1 replies
  • 0 Likes

Clarification on Security Policy and Decryption Policy Processing Order

Attention: Global TPM TeamHello Team, I am reviewing PAN-OS packet processing behavior related to Security Policy and Decryption Policy evaluation. Based on the public documentation below, I understand that Security Policy lookup occurs during session setup and that traffic matching a Decryption Policy can be decrypted for further inspection...

Nimbus by • L2 Linker
  • 312 Views
  • 2 replies
  • 1 Likes

Impact of "Sync to HA Peer" During PAN-OS Image Synchronization

Attention: Global TPM Team Hello Team, General product behavior question. When using "Sync to HA Peer" to synchronize a PAN-OS software image to an HA peer, are there any known service impacts or operational impacts (traffic forwarding, session handling, HA operation, management-plane performance, etc.) during the synchronization process? ...

Nimbus by • L2 Linker
  • 308 Views
  • 2 replies
  • 1 Likes

Wrong classified URL

Hi, Can someone explain what the malware base DB is? Does the MLAV flag indicate that the file was classified as malware by the machine learning engine? If so, how can this classification be overridden or excluded? Thanks.

url_check.png
HeinzP by • L2 Linker
  • 336 Views
  • 4 replies
  • 1 Likes

PA-5450 Dataplane CPU Utilization Discrepancy (GUI vs SNMP)

Attention: Global TPM team, Hello, Could you please clarify the relationship between the Dataplane CPU utilization shown in the GUI and the SNMP CPU OIDs on a PA-5450? It was observed that the GUI shows approximately 80% Dataplane CPU utilization, while hrProcessorLoad.2 (1.3.6.1.2.1.25.3.3.1.2.2) returns only 5-10%. Could you please con...

Nimbus by • L2 Linker
  • 225 Views
  • 2 replies
  • 0 Likes

PA-1410 on 12.1.10-h2 troubleshooting for PAN-282032

Hi, we are currently running a PA-1410 on PAN-OS 12.1.10-h2. The workaround provided to mitigate PAN-282032 says to run the following command: debug dataplane sw-asic dump flow-table info When we run the above command, we get an invalid syntax error. Does anyone know if this workaround works for a PA-1410? Known Issue - PAN-282032 Any advi...

DHCP Relay Source IP Address Behavior

Attention: Global TPM team, Could you please confirm the following DHCP Relay behavior? When a firewall acts as a DHCP Relay agent and forwards DHCPDISCOVER messages to a DHCP server as unicast packets, is the source IP address the IP address of the interface configured as the DHCP Relay agent? Also, if available, could you please share an...

Nimbus by • L2 Linker
  • 322 Views
  • 2 replies
  • 0 Likes

PAN-OS 12.1.2 Features - Operational and Performance Impact of Brotli Inspection and DNS Security Logging

Attention: Global TPM team, Hello Team, I would like to confirm the operational and performance impact of the following features introduced in PAN-OS 12.1.2: 1. Brotli-compressed content inspection using the Content-Based Threat Detection (CTD) engine 2. Dedicated DNS Security log type for improved DNS visibility Could you please advise on...

Nimbus by • L2 Linker
  • 299 Views
  • 1 replies
  • 0 Likes

License Validity Date Mismatch on Palo Alto PA-1410 Firewall Without License Renewal

I have checked the purchase documentation, which states that the license validity period is from December 24, 2025, to December 23, 2026. However, the firewall displays a Date Issued of July 2, 2026, and an Expiration Date of June 17, 2029. Please note that no license renewal has been performed to date, and the next license renewal is scheduled...

reynandaal_0-1792397706918.png

Guidance on Getting Started with Enterprise DLP Testing for PII/PHI Protection

We recently deployed a Palo Alto Networks firewall and, as part of the implementation, received 200 Prisma Access licenses. I also requested an Enterprise DLP license for evaluation/testing, which has now been activated. Currently, we have access to the following components: Strata Cloud Manager Strata Logging Service Enterprise DLP Data Securi...

Factory Reset / Secure Erase - Removal of certificates and backup files

Attention: Global TPM team, Could you please confirm whether Factory Reset and Secure Erase (DoD/NNSA Scrub) remove the following data? - Imported certificates (including associated private keys) - Configuration snapshots - Configuration backup files stored on the firewall If available, could you also provide any documentation or internal ...

Nimbus by • L2 Linker
  • 227 Views
  • 1 replies
  • 0 Likes

Clarification on SSL Inbound Inspection re-encryption requirement and certificate usage

Attention: Global TPM TeamHello Team, This is a general product behavior question. No configuration review or TSF analysis is required. Question 1 With SSL Inbound Inspection enabled, is the following deployment supported? Client ↓ HTTPS PA-440 ↓ HTTP BIG-IP (AWAF) ↓ HTTP Web Server Can PA-440 forward traffic as plain HTTP after decryp...

Nimbus by • L2 Linker
  • 223 Views
  • 1 replies
  • 0 Likes

PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied"

Hi Team Pan OS Integrated User ID is connected with one of our DC server with out having any issues while configuring in the other DC servers we are getting the "ACCESS Denied" in the server monitoring. While seeing in the >less mp-log useridd.log I have seen in he following error: tail follow yes mp-log useridd.log 2025-02-20 14:1...

  • 1656 Posts
  • 63 Subscriptions
Top Solution Authors
View All
Latest Comments
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks