Globalprotect traffic translated to port 20077

Hi Team, in our test env I have a firewall with GP config. I would like to NAT the GP traffic to a loopback interface. Original destination port is 50443 and a NAT rule is set up to translate it to 443 (and the dest address as well...)

However, if I

Panorama

Hello I was looking for the REST API's for EDL in panorama, I could only able to find for the create EDL that too for IP only (https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-panorama-api/pan-os-xml-api-use-cases/enforce-policy-using-external-dyn

XQL Query - File Delete Action

Hi,

Please may i know if anyone may have the issue i encounter since early May 2024? 

1. Delete a folder (100+ files) from specific endpoint (right click mouse and select delete)

2. From Cortex XDR Query Builder - File Query and Select Action = Delet

Tag based widgets in Cortex XDR?

Hi all,

We've started using Cortex XDR this year, and I currently see some limitations on the reporting and dashboard module. We're using tags to keep track of our endpoint, and we are looking to create reports based on tags. 

Basic example, I want a

Hip Object

I have an mdm on my corporate smartphones, how do I add it to the hip object so that users can only access the internal network if they have the mdm installed?

XDR Query Builder

Hi,

I'm trying to use Query Builder but unable to get any results. see also attached screenshot.

But when I perform a XQL search with query "dataset = endpoints" it gives me results.

What should be done so I can use the Query Builder?

thanks

BGP session flapping with error code 3 subcode 11

Hi All,

I have an issue with setting up a BGP Establish connection. On my side is a PA firewall connected to the a ISP with BGP session. The first time, the ISP side sent only the default route to PA, and there was no problem in the BGP session. An

Telemetry decided to stop sending

I have seen a couple others post this same issue on Reddit but figured this would be the place to ask. Does anyone know how to kick telemetry back into a working state? It was working and then last month on the 25th was the last time it sent. no erro

How to import config.xml generated by ChatGPT into my PAN OS 10.1?

Hi, 

Novice engineer here. Excuse any misunderstandings.

I;m running PAN OS 10.1.0 on VMware. I've been tasked with putting together a toplogy.

I figured I can simply use chatgpt to generate the config.xml file and import it.

Howver, i seem to run

Azure Palo VM IPSec Tunnel to another Azure Palo VM

Hello,

I am running into an issue. I have 1 Azure subscription with multiple regions (US , Europe etc). I have a Palo Alto Virtual Appliance in front of each region. Which filters all traffic going to and from the regions. I have successfully built t

Secure Access Service Edge module in SASE Fundamentals course is not working properly

Secure Access Service Edge module in SASE Fundamentals course is not working, can not be marked as complete no matter how many times I have dropped and tried again, passed all and again it is unfinished. I have even passed knowledge check and assessm

Is there a way to launch a playbook from a button in an incident

I have a couple different use cases where I have several steps in a playbook that I would like to complete again after the playbook is complete. I basically have several steps in a playbook that I would like to have launched by a button. I am trying

Playbooks repository

Does anyone know and can share if there are websites or communities like this where playbooks used in Cortex XSOAR are shared? I'm not talking about code, but flowcharts etc

Global Protect VPN client-less web portal local account

Hi,

We have a user who is traveling to a restricted location and will need to connect to our client-less Global Protect Web Portal using a local account. Is there a way to have this one user change their password after successful initial login to our

security profile malfunction detection

Does anyone have any good log events to key on for notifying when a security profile (antivirus, anti-spyware, vulnerability protection, url, file blocking, wildfire) may not be functioning properly?  I am thinking maybe trying to identify the log ev