Discussions

Active-Active NAT Rule Binding

I can't find anything which goes into enough detail on Active-Active design around NAT and more importantly ARP.

The easiest way to explain the current deployment is as follows:

• Site 1 / Firewall A
• Site 2 / Firewall B

Each firewall is connected to uni

Closing an XSOAR 6 incident via API

How do we close a single incident via API? I have seen batch closing API. I'm not trying to close incidents in batch.

Palo alto interface DHCP

I have configured DHCP on 4 interfaces, each DHCP on a different subnet. I connected each Palo alto port to a unique switch with the understanding that all devices connected to particular PA port will get ip addresses only from the corresponding DHCP

Broker-VM disconnet alert notification

Hi All,

anyi dea how i can generate an alert when a broker-vm gets disconnected?

Has anyone managed to create a correlation rule that will alert if a Broker-VM gets disconnected from XSIAM?

the xsiam documentation states that 'To help you monito

SCIM directory only shows old user data when I change the new SCIM directory domain.

We previously had an SCIM integration with an old Azure AD tenant. Recently, we migrated to a new Azure AD SCIM connection, using the same user data (i.e., usernames and attributes remain unchanged).

However, we have observed that logs are still showi

Global Protect keeps dropping connection

A user running MacOS 15.3.2 & GP 6.3.2 keeps getting automatically signed out of the VPN connection after 5-15 minutes. This is the only user having this issue in our organization and I am not able to replicate the issue. 

I confirmed that everything

Zero-Trust Strategy for Prisma

Hi all

I have been tasked with providing a Zero-Trust strategy document to management, related to how to implemenet this on our Prisma Access solution. 

I am looking for some examples that I can pull from that anyone has done this already for.

I have

Python: panos opstate

I'm having tremendous success automating security policy updates with the panos Python library, but I'm currently stuck on obtaining the hit counts of rules programmatically. 

I'm able to access all attributes of the SecurityRule objects, but the o

Redistribution UIA not working...... INTERNAL ERROR

Hi,

I configured a PA in order to redistribute UIA mappings to another FWs. All the config is OK but its not working.

I can see this in the FW redistributing:

(active)> show redistribution service status

Redistribution info:
Redistribution service

UIA user normalized issue

Hi,

We have 2 cluster firewalls with the same config for UIA and Group mapping.

If i look for an IP. show user ip-user-mapping all | match IP

I cant see a different behavior.

One cluster shows user as use@domain and groups where this user belongs -

Impact of deactivating HA configuration in Azure

I have a HA configuration in Azure.

I’m trying to deactivate the HA configuration. If we shut down the Passive side in the Azure portal and delete the VMs, what will be the impact on the Active side?

Sending alert data via http POST - http body is empty

Hi All,

so i am trying to send alerts via a playbook using either http or httpv2 script to send my alert data to a webhook url where the soc analysts will have a common workbench for all alerts (multi xsiam tenant options)

i can connect to the web

Pa220 begginer

Hello all, 

 I am a new with this field for firewall pa220 .

However i have one mikrotik which the port1 is connected with ISP , port2 on mikrotik is connected with my switch .

How can configure the firewall? How to start. All replys as welcome and i wi

About MU-SPN behavior when IP Optimization function is enabled

For RN and SC, the IP address assigned from the service infrastructure IP is set as the loopback address, but
when IP Optimization is enabled, will the MU-SPN have an IP address assigned from the service infrastructure IP?
If so, is there a way to chec

EDL Limit

How we can increase the External Dynamic List (EDL) max IP limit ?

For example: PA 3420 has 50,000 IP limit, how we can increase this limit in EDL ?