Strata Cloud Manager

Buy or Renew

Strata Cloud Manager is our AI-powered, holistic management and operations solution that transforms network security management by maximizing and improving security, preventing network disruptions, and simplifying management, consistently across SASE and NGFW platforms

The Palo Alto Networks Next-Generation Firewalls provide true, complete visibility everywhere, along with precise policy control. This resource page provides information from getting started guides to many other trouble-shooting docs. Ask your questions or provide insightful answers in the discussion forum specific to Next-Generation Firewall.

Strata Cloud Manager

The existing AIOps for NGFW, Prisma Access, and SD-WAN names have been updated in the product UI under the new name Strata Cloud Manager. You will be notified of the name change through the product UI and documentation. There is no action required.

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
IBalaro 02-24-2026	Prisma Access Service Connection to Palo Alto FW in HA-AA Hi, We were able to make the tunnels up under 1 Service Connection (with 2 tunnels, primary and secondary) in Prisma Access and 2 tunnels in Palo Al... — Read more posted in Prisma Access Discussions	207	1
TosYoshida 02-20-2026	Prisma Access Explicit Proxy — Anti‑Spyware behavior when DNS bypasses Prisma (logging subtype + test methodology) Attention: JAPAC TPM TeamHello Team, I have a question about the Anti-Spyware profile behavior in a Prisma Access (Explicit Proxy) environment. Sc... — Read more posted in Prisma Access Discussions	422	0
E.Lebovich929128 02-18-2026	Service Health Probes Hello, I'm trying to configure service health probes over standard VPN tunnels. I've configured a new probe and a new probe profile. added the ne... — Read more posted in Prisma SD-WAN Discussions	113	0
IBalaro 02-02-2026	Prisma Access China - push config failed Hi, Anyone experienced this error when pushing the configuration? This is a customer located in China. I have tried disabling the default security p... — Read more posted in Prisma Access Discussions	2582	4
BrewCity34 01-30-2026	SD-WAN with ION's running 6.5.1-b5 performance issues I wanted to find out if anyone has had issues with running 6.5.1-b5 on their ION's (3000/3200/9000). We have been running this version since late Octo... — Read more posted in Prisma SD-WAN Discussions	953	0

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
AlexMcCreery 02-27-2026	Disconnect Internally but not remotely We have some users who need to connect to part of our network that isn't routable which means GP cannot connect when they are plugged into it. In or... — Read more posted in GlobalProtect Discussions	235	0
yahweh05455 02-26-2026	while do the factory reset of pa 5250 showing error: findfs: unable to resolve 'label=sysroot0 Hi , We have Palo alto 5250 we have forgotten the password so we are planning to do factor reset of the device but we have done factor reset to but wh... — Read more posted in Next-Generation Firewall Discussions	360	0
s.kotkar727868 02-25-2026	not able to change default admin password on PA-1410 We are setting up new PA-1410 firewall and first login from SSH and GUI asking to change password which we did. But after changing new password still ... — Read more posted in Next-Generation Firewall Discussions	467	6
Walt 02-25-2026	Backup Peer HA1 IP Address ? Just completed the PALO BPA and we have a recommendation for "No backup to the HA1 peer IP address is configured" We've tested failover and it works p... — Read more posted in Next-Generation Firewall Discussions	133	1
M.Maus 02-24-2026	Pre-Populate Multipule Portal Addresses I would like to know if there is a way to setup the .msi file to pre-populate the portal ip addresses for my users.I found this kb article on how to s... — Read more posted in GlobalProtect Discussions	564	2

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.

Author	Topic	Views	Replies
yahweh05455 02-26-2026	while do the factory reset of pa 5250 showing error: findfs: unable to resolve 'label=sysroot0 Hi , We have Palo alto 5250 we have forgotten the password so we are planning to do factor reset of the device but we have done factor reset to but wh... — Read more posted in Next-Generation Firewall Discussions	360	0
s.kotkar727868 02-26-2026	not able to change default admin password on PA-1410 We are setting up new PA-1410 firewall and first login from SSH and GUI asking to change password which we did. But after changing new password still ... — Read more posted in Next-Generation Firewall Discussions	467	6
Walt 02-25-2026	Backup Peer HA1 IP Address ? Just completed the PALO BPA and we have a recommendation for "No backup to the HA1 peer IP address is configured" We've tested failover and it works p... — Read more posted in Next-Generation Firewall Discussions	133	1
E.Annobil 02-20-2026	PAN-OS HA UGRADE PATH Hi All, Please I'm upgrading a palo alto firewall in HA mode remotely, I'm having some issues with remote access and for me not to loose access and be... — Read more posted in Next-Generation Firewall Discussions	609	2
ym-higashi 02-25-2026	Best practices for Palo Alto security policy when destination IP/FQDN is dynamic or unknown Group Company A is implementing surveillance cameras and requires communication to send data from the cameras to an external cloud server. The cloud s... — Read more posted in Next-Generation Firewall Discussions	684	3

Blogs

Cloud-Delivered Security Service (CDSS) February Newsletter

02-28-2026 — Cloud-Delivered Security Service: The Monthly Newsletter for Security That Never Sleeps Welcome to the February edition of the Cloud-Delivered Security Service (CDSS) Newsletter This month brings powerful momentum across CDSS, including the launch of our new 30 Day Free Trial designed to help y... — Read more

Labels: Advanced DNS Security Advanced Threat Protection Advanced URL Filtering Advanced WildFire malware detection CDSS DNS IoT Devices NGFW Threat Prevention URL Filtering WildFire
172 by tbolatiwa in Community Blogs

Introducing Compliance Center: A Unified Approach to Regulatory and Security Compliance

12-09-2025 — As digital transformation accelerates, so does the risk of "audit fatigue," leaving your security team overwhelmed. Today, we launch Compliance Center, a unified dashboard that automatically assesses your entire Palo Alto Networks deployment again... — Read more

Labels: Audit Fatigue CIS CSC cloud security Compliance Compliance Center Compliance Monitoring GRC network security NGFW NIST CSF PCI DSS Prisma Access Regulatory Compliance Risk Management Security Compliance Security Reporting Strata Cloud Manager
2012 by DRanjit in Community Blogs

Supercharge Your Web Security: Announcing PA-5450 Support for Web Proxy

11-18-2025 — We're excited to announce full Web Proxy support on the high-performance PA-5450 Next-Generation Firewall with PAN-OS 12.1.2 (Orion). This allows you to consolidate your security stack, leveraging the PA-5450’s power for full SSL decryption, Advan... — Read more

Labels: Advanced Threat Prevention App-ID Data Loss Prevention DLP Next-Generation Firewall NGFW Orion PA-5450 PAN-OS 12.1.2 Security Consolidation SSL Decryption User-ID Web Proxy
2050 by vekrishnan in Community Blogs

Ignite & Activate: How Advanced WildFire is Disrupting Malware with Code Genes

11-17-2025 — Malware evolution is now fueled by LLMs, bypassing manual security. We're introducing Code Gene, a revolutionary capability in Advanced WildFire that automates defense using software genomics. Code Gene instantly analyzes executables to find resil... — Read more

Labels: Advanced WildFire Advanced WildFire malware detection AI-powered malware prevention Automated YARA rule generation Code Gene malware analysis LLMs Malware Malware code reuse detection NGFW Precision AI Security Services Threat Prevention WildFire
1871 by lizwang in Community Blogs

Palo Alto Networks VM-Series Enhances Security for Virtualized Workloads on Red Hat OpenShift Virtualization

05-19-2025 — We're excited to announce that Palo Alto Networks VM-Series next-generation firewalls are now supported on Red Hat OpenShift Virtualization. This integration provides more seamless, robust security capabilities for your workloads running on Red Ha... — Read more

Labels: Firewall Kubevirt AI network security NGFW OpenShift virtualization Runtime security Software Firewall Threat protection VM-Series ZeroTrust
3549 by jpunia in Community Blogs

Articles

Custom Signatures With ChatGPT and AI Security

12-19-2025 — We all know ChatGPT can write code and articles, but can it automate the specialized task of threat mitigation? We set out to test the capabilities of AI by asking it to generate a Palo Alto Networks custom signature. Before diving into the experiment, let's establish some foundational context... — Read more

Labels: AI AI Security Custom Signatures cyberelite NGFW Prisma Access Prisma AIRS
12166 2 5 by nikoolayy1 in General Articles

Rate-Limiting File Uploads with Palo Alto Networks Custom Signatures

10-13-2025 — Learn how to rate-limit file upload requests on Palo Alto Networks firewalls using custom vulnerability and combination signatures.This step-by-step guide shows you how to identify your upload endpoint, build precise signature conditions, and enfo... — Read more

Labels: Custom Signatures cyberelite file upload NGFW Prisma Access
8765 3 2 by nikoolayy1 in General Articles

Support FAQ: How to Troubleshoot BGP on Palo Alto Networks Firewalls

06-05-2025 — Most days, BGP runs quietly in the background. BGP advertises routes that keep your WAN, VPN, cloud environments, and public services connected and reachable. Until it doesn’t. And when BGP breaks, it’s not just a routing issue, it’s unreachable services and frustrated users. This guide will h... — Read more

Labels: How to NGFW support Troubleshooting
10792 4 by JayGolf in Support FAQ

Palo Alto Networks NAT Session Distribution as a Way to Implement Server Load Balancing

05-30-2025 — The Palo Alto Network Destination NAT Session Distribution can be used to implement similar to Load Balancer functionality by using one of the "distribution" methods. — Read more

Labels: NAT Next-Generation Firewall NGFW
11173 4 2 by nikoolayy1 in General Articles

Prisma Access Agent

05-13-2025 — Learn about Overview of Prisma Access Agent NGFW & Prisma Access Support Information and Licensing High level Architecture Authentication Gateway Selection and Tunnel Establishment PAA Specific features — Read more

Labels: NGFW Prisma Access Agent
2019 1 by svaidya in Prisma Access Webinars

Blogs

Introducing the Zero Trust Posture Center: Turn Zero Trust Strategy into Reality

01-12-2026 — Discover how Palo Alto Networks’ Zero Trust Posture Center in Strata Cloud Manager delivers real-time visibility, prioritized risk insights, and actionable Zero Trust remediation. — Read more

Labels: Prisma Access Strata Cloud Manager StrataNext-Generation Firewall. NGFW
5639 by JayGolf in Community Blogs

Introducing Compliance Center: A Unified Approach to Regulatory and Security Compliance

The Official AI Canvas Prompting Guide: From Data to Decision

11-24-2025 — AI Canvas is your no-code platform for data exploration in Strata Cloud Manager. This essential guide teaches you the 4 Components of an Effective Prompt—Subject, Action, Filters, and "How-to-Count"—that turn vague searches into precise, productio... — Read more

Labels: ADEM AI Canvas AI Dashboards AI-driven security CDSS GlobalProtect NetSec Admin Network Admin Prisma Access Prompting Reporting Security Admin Strata Cloud Manager Threat Analysis Troubleshooting
1906 1 by vangupta in Community Blogs

Introducing DNS over HTTPS (DoH) Support in Advanced DNS Security Resolver (ADNSR)

11-13-2025 — We now support DNS over HTTPS (DoH), encrypting all your DNS traffic for maximum privacy and defense against eavesdropping. This is a game-changer: our Precision AI analyzes the encrypted DNS payload in real-time, ensuring you get both strong encr... — Read more

Labels: ADNS ADNS Resolver ADNSR Advanced DNS Resolver Advanced DNS Security DNS over HTTPS DNS Security DoH Encryption network security Precision AI SCM Strata Cloud Manager Threat Prevention TLS Unit 42
2497 1 by gpokuri in Community Blogs

Adaptive ML Baselining to Detect Network Performance Degradations

11-04-2025 — Modern IT performance is about experience, not just uptime. With ADEM’s intelligent baselining, IT teams can see how each network segment truly performs — adapting to real-world conditions and detecting anomalies in context. Discover how dynami... — Read more

Labels: ADEM Autonomous ADEM Strata Cloud Manager
3878 1 by MSharma11 in Community Blogs