This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP

Subject: PAN-OS 11.1 — Source-Based DNAT on TCP 443 While GlobalProtect Uses Same Public IP We have a PA-460 running PAN-OS 11.1.10-h1. Our GlobalProtect portal and gateway are both bound to ethernet1/1 on the same public IP, using TCP 443. Authentication is handled through Duo SAML. We need to expose an internal HTTPS/WCF application on TCP 443...

mikeb by • L0 Member
  • 37 Views
  • 0 replies
  • 0 Likes

Unable to Create a New Support Case – Portal Access Issue

Hi Team, I am encountering the error message shown in the attached screenshot when trying to create a new support case. After logging into the portal, when I attempt to create a case for one of my customers, I receive the attached error message. Could you please look into this issue and help me resolve it? Please let me know if you need any addi...

Trying the DNSProxy feature for Static Response

Hie, Situation - Wanted to kaminsky the DNS Responses for my client from the FWComplication - None of the dig are responded Need your help on this? Client Requests for Promise/Spoofed IP keviv@keviv-VMware-Virtual-Platform:~$ ifconfig ens37ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500inet 192.168.21.21 netmask 255.255.255.0 ...

ocpfn4 by • L0 Member
  • 612 Views
  • 1 replies
  • 0 Likes

Resolved! Panorama SD-WAN Plugin Compatibility

Hello All! Seeking clarification on whether or not I need to upgrade my Panorama SD-WAN plugin. Currently, I am running PAN-OS 10.2.x and using SD-WAN plugin version 3.0.3. In the compatibility matrix the maximum PAN-OS version listed for this plugin version is "Latest". Does this refer to the latest version based on the minimal PAN-OS versio...

nohash4u by • L3 Networker
  • 252 Views
  • 2 replies
  • 0 Likes

How to disable Telemetry?

How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...

2026-10-13_095412.png

About CVE-2026-91403

We are currently verifying whether we are affected by the Java-related vulnerability (CVE-2026-91403). 1. After reviewing Palo Alto’s security advisory,we were unable to confirm the existence of the Java-related vulnerability (CVE-2026-91403). Does this mean it has not yet been disclosed, or that we are not affected? 2. I checked the manufactu...

n-tomo by • L2 Linker
  • 238 Views
  • 1 replies
  • 0 Likes

SSL Decryption Causing Issues with Office 365

Currently working on a deployment with a few test users utilizing SSL decryption before it's rolled out to a wider user base. Decryption is working for the most part with the required exceptions in place, but having some issues with O365 apps no longer working after it was implemented. I had created an EDL and also explicitly added some Micros...

DJ_1924 by • L2 Linker
  • 239 Views
  • 4 replies
  • 0 Likes

[SOLVED] Prisma Access - Some Websites Are Unaccesible When Connects Only to Colombia Central Gateway

Hello, LiveCommunity team! I'm writing to share my experience regarding a web access error that occurs when our mobile users are connected to our "Colombia Central Gateway," which is deployed via SCM. When users connect to the "Colombia Central Gateway" and attempt to access the following websites: bancodeoccidente.com.cobancodebogota.com/person...

DanielSRomero_1-1793126043378.png

DecryptSSL Inboundwith SSL app no

I have just configured SSL Inbound for two servers and I'm seeing some unusual behavior. I can see random connections where the SSL "decrypted" flag is set to "NO" for SSL application. However, when the application is web browsing, it is always set to "YES".

Decrypt.jpg
BigPalo by • L4 Transporter
  • 220 Views
  • 2 replies
  • 0 Likes

Github EDLs missing IPs?

Hi everyone, we've been using the Palo Alto managed GitHub EDL to allow access to GitHub and recently noticed some connections being blocked because the destination IPs aren't covered by the EDL. For example, we see successful connections to addresses like 140.82.121.x that are allowed from the EDL, but also connections to 20.250.119.67 and ...

Resolved! CSP Customer Support Portal Down for Maintenance – 23 October 2026

Hello Community, We are unable to access the Palo Alto Networks Customer Support Portal: https://supportcases.paloaltonetworks.com/ The portal displays the following message: “This website is down for maintenance. Sorry for the inconvenience. We'll be back shortly.” We observed this issue on 23 October 2026 at approximately 10:44 AM IST. Could a...

PA1420 HA Mode stucks in Initial (HA Initializing) mode for too long

HI All, We have an Active Passive PA-1420 which is connected together via H1-A and H1-B together. But when we restart the nodes or either of the nodes, the Passive PA stucks in Initial (HA Initializing) mode for too long. The last time i checked We restarted the devices at 12:25:00 and I last time checked 1:00:00 it was still in the same m...

I am looking for information about PAN-311601

https://origin-docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-10-known-and-addressed-issues/pan-os-12-1-10-known-issues PAN-311601 If the node is observed to be stuck with the “session clearing fault,” rebooting the node is the workaround to restore the node to an online state after all other fault conditions have been resolved....

n-tomo by • L2 Linker
  • 229 Views
  • 2 replies
  • 0 Likes

GlobalProtect Release for Ubuntu 26.04 LTS ?

Hello together.recently was the new Ubuntu 26.04 LTS release, until now the provided GlobalProtect client supports only Ubuntu 24.04:https://docs.paloaltonetworks.com/compatibility-matrix/reference/globalprotect/where-can-i-install-the-globalprotect-app?otp=linux#linux When can we expect the new GlobalProtect version for Ubuntu 26.04 ? Best re...

  • 24477 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Top Liked Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks