Issue in enabling the "content-repository" feature.

Hi Team, I have a customer who wants to enable the "content-repository" built-in feature.

They tried the below steps:
1. First, they have enabled the feature successfully in DEV.
2. Next, when they enabled the feature in PROD, they got an error (refer

What does ch mean in PA-VM-OS Software?

What does ch mean in PA-VM-SaaS-10.2.4-ch171.saas? I think h is a hotfix, but I don't know what c means.

PBF with Egress loopback interface

I may be going about this wrong, but here's what I'm trying to accomplish, and this is the way I thought I could accomplish it.

I need to route all traffic from a specific zone/subnet to a routing instance, and load balance egress, with the exception

Failed to install licenses. Web proxy license is not supported for this platform.

Hi team,

I acquired a Web Proxy license intending to test Explicit and Transparent proxies. However, upon attempting to retrieve the license, I encountered an error stating, "Failed to install licenses. Web proxy license is not supported for this p

Help me to fix this issues /possible solution

 I am going to configure  Palo alto 5250 firewall to   branch   Huawei router  

The device is not physically connected ,  i try to  do static route from Palo alto to  Huawei router router but the network is not reachable.

kindly support me how to f

The option to add Associate Apps is greyed out

Hi everyone,

The option to add Associate Apps is greyed out. I’ve confirmed that AIOps for NGFW is activated.

Why is this greyed out?

Regards,

Renz

CVE-2024-3400 Unit42 Threat Brief / Private Data Reset

Unit42 updated the threat brief at Threat Brief: Operation MidnightEclipse, Post-Exploitation Activity Related to CVE-2024-3400 (Updated April 22) (paloaltonetworks.com) on 22 April to include remediation steps for each observed level of exploit atte

Query for CVE-2024-3400

Hello Team,

Work around is for mentioned vul is to install latest Applications and Threats content version

Applications and Threats content version 8833-8684 is already installed in our firewall, could you please confirm is our firewall affected?

CVE-2024-3400 IOC's

Hello All,

Its a twitter link but will try and summarize the process. 

https://twitter.com/cyb3rops/status/1781294529586331650

How to use a Machine Cert with a Private Key for Global protect prelogon

Greetings,

We utilize our own PKI infrastructure so the certificates we want to use for prelogon are already in place. I am also new to this so it may be working as designed but having a hard time validating.

We have imported a rootCA into Strata

Eve-NG Palo Alto VM ARP Issue

Does anybody encounter arp problems in eve-ng on palo firewall with pan-os 11 version ?  As an example, i have a small topology like clientA->routerA-> firewall<-routerB<-clientB , when i try to ping from clientA to clientB, clientA send ARP Request

Need to allow dropbox sharable url and rest of everything block

Hello ,

we got one request from user that he required only access sepcific sharable url only and rest of dropbox traffic blocked . Please help with this, as user have some pdf which need to download with dropbox specific url (that dropbox url share

SysLog setup not working

Hi,

I am using PA-2050, with PAN OS 4.1.3.

From few days I am trying to configure the syslog to be sent to a central logging system. I followed every possible documentation, but I am not getting any syslogs coming to the syslog server.  I tried on sys

SSL Inspection issues with GlobalProtect users

We're having some strange SSL/TLS Inspection errors while on GlobalProtect. We are getting unsupported-parameter errors while a user is connected to GlobalProtect trying to get to any internet site, including things like google.com. Doing a packet ca