Reverse proxy for Exchange ActiveSync

We have a Palto Alto cluster and I want to use them as reverse proxy for our Exchange inbound trafic. We activated decryption for this trafic and we want to allow only ActiveSync trafic / application.

It did not work with only allow ActiveSync appl

10.2.8 DP DP Hardware Packet Buffer exhaustion bug

If upgrading to 10.2.8, keep an eye out on your DP Hardware Packet Buffer usage. We've seen it cause PA-5250's to stop processing traffic.

TAC is aware of the issue. We ended up downgrading to 10.2.7-h3 to work around the issue for now (be mindful of

Cortex XDR dashboard into Grafana?

Allow traffic mikrotik site to site.

Hi everyone. I just installed a firewall at an office. Office A is connected to office B via two site-to-site mikrotiks.
Inside office A there is a server that records the presence of office B employees.
After introducing the PA440 it stopped working..

Is Pan-OS 10.1.12 susceptible to CVE-2023-51384 or CVE-2023-513845?

Is Pan-OS 10.1.12 susceptible to CVE-2023-51384 or CVE-2023-513845?

Our Tenable scans says it is, but I see no fix recommended for it (for any PAN-OS release).   We have updated our ciphers to remediate CVE-2023-48795 but it also still shows up on

Stop authentication happening twice for GP client

Hi All,

we are getting duo/twice authentication for our GP clients is that possible to avoid with out enable option " Generate cookie for authenticaiton override"  

XSAOR with HA using Open search Upgrade

Hi Team,

The customer uses the XSOAR in High Availability using OpenSearch. and the number of app servers is 2.

So is it possible to upgrade the XSOAR not stopping the server?

For ex) Stop the App server 1 and upgrade the App server 1 first, an s

Need clarification on URL Filtering logs

Hi everyone,

Please help me get through this.

We have configured PA-450 firewall and everything is working fine as expected.
But, We have used the option URL category in the security policy without an URL filtering profile for all user group. Which is

Failed to extract file panup-all-antivirus-4788-5306.tgz with sha256

Failed to upgrade the antivirus package for primary firewall in HA causing the antivirus mismatch.

Its working if I delete and download install again.

Any permanent solution for this? Upgraded to the previous preferred version 11.0.2-h3 but issue sti

Query for CVE-2024-3400

Hello Team,

Work around is for mentioned vul is to install latest Applications and Threats content version

Applications and Threats content version 8833-8684 is already installed in our firewall, could you please confirm is our firewall affected?

Palo Alto Cortex XSOAR - Community Edition

Hello everyone,

I'm trying to get the free licence of Xsoar and i'm struggling. I didn't get the link, key or instructions.

Please can someone help me with this.

Cordially. 

Cortex XSOAR 

403 forbidden error while importing IDP fiile

Hii,

I have been trying to import G suit IDP file in SAML Identity provider on palo alto VM firewall but for infinite time its just showing message "uploading" without showing any error message. when I checked in network tab of inspect element I ca

GlobalProtect Static IP .....?

Hello,

I want to ask is possible to give GlobalProtect client static IP or no ?

Thank you