AWS GWLB VPC Endpoint Associations no longer work post-upgrade

Traffic Log query for FQDN object errors with "ip range [fqdn] expansion exceeds maximum number of items allowed"

I created a new FQDN object and added it to a security policy. 

After committing changes, I tried to validate the rule was working, but I get this error in the traffic log when searching for (addr in 'my-FQDN-object'): 

The security policy rule is

Unable to add disk to Panorama from API / SDK

Im unable to add disks attached to my Panorama instance from the xml api.
I used the provided request from the xml api browser

I tried the same from the Python SDK using the "op" functi

Deal Registration End Customer Details not Include

I cannot find the end customer account in the account list that provides the filtering feature while registering the deal. How can I manually add the end customer details to the list?

Heartbeat Backup showing down on both HA peers

I have an active passive configuration which seems to be working and has failed over successfuly in the past (possibly a year ago).  According to the PA docs I read the heart beat is a ping that runs every 1000ms.  I assume since the heartbeat backup

Chrome (HSTS) NET::ERR_CERT_AUTHORITY_INVALID - with 10.1.14h4 update

We updated PANOS (on Friday before h6 was released on Sat) to 10.1.14-h4, rebooted and now our users are sporadically complaining about when using google Chrome (Edge not effected), getting a "Your connection is not private" NET::ERR_CERT_AUTHORITY_I

internet issue

i have PA 440 trying to access the internet and i have set virtual router with default route to dataplane interface however when i try to ping anything on the internet the reply comes from the mgmt interface.

(attachment)

When will PAN-OS version 10.2.10-h2 be preferred released?

For CVE-2024-0012 many partner have ask about it When will PAN-OS version 10.2.10-h2 be preferred released?

Or is it possible to estimate date and time?

Telemetry decided to stop sending

UPDATE: This was a bug and was fixed after installing 10.2.10 

I have seen a couple others post this same issue on Reddit but figured this would be the place to ask. Does anyone know how to kick telemetry back into a working state? It was working

BGP enabled BFG Profile, 1 of the peer will marked down by bfd control detection time expired for BFD session.

2 BGP peer .

1 bfd profile can be used for BGP .

1 of the peer will trigger a Critical/high system log.

The log is 

BFD state changed down for BFD session 6 to x.x.x.x on interface x.x Protocol :BGP

BFD control detection time expired for BFD sessio

Fuel Workshop - Watch Now: Managing Your Palo Alto Networks Assets and User Accounts

In case you missed it, check out this new Fuel Workshop series, which covers the following topics:

• Customer Support Portal Overview
• License Management
• RMA Best Practices

Dive into the three-part Fuel Workshop video series and learn how to efficient

Knowledge sharing: Palo Alto General Logs and Log files that are in the managment, data and control planes overview/review

1. Most of the palo alto well known deamons have their own logs that can be reviewed:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLUeCAO

2. It is interesting that in the higher end Palo Alto platforms like PA-5000

Is there a way to test remote host ports from the palo alto firewall?

Hello Palo Alto Team,

I new to Palo Alto and loving it but I am looking for PAN-OS cli commands similar to telnet, nc (netcat) or curl etc.. I have seen there is an option to do ssh source port (the scp command also supports this), can this replace

Recently just installed expedition in the VMware, however couldn't login to the Expedition via google chrome

Recently just installed expedition in the VMware, however couldn't login to the Expedition via google chrome.

Don't know where to load the google chrome?

Post Expiration Admin Login Count

Hello expert,

I wanted to check if someone encountered same issue as mine.

We did configure password profiles in our PA-820 (version 10.2.9) by enabling "Post Expiration Admin Login Count" to 3 times.

Somehow, after password was expired it just str