Rule Order Best Practice

We recently migrated to the Palo Alto Firewalls. I am looking for best practice/recommendations on how to properly order firewall rules. We have all our block rules first (geoblocking, malicious sites, specific apps, etc) up top. But what about the r

SIP/RTP Traffic Issues in Palo Alto Active-Active vWire Setup Causing MAC Flapping In L3 devices

In a Palo Alto Active-Active vWire setup, traffic entering a port on Device A is not supposed to egress from any port on Device B. The HA3 link is typically used to forward packets from the active-secondary device to the active-primary device for pro

Cannot log in to GUI and CLI after upgrade to 11.1.4-h7

After the upgrade to 11.1.4-h7 from 11.1.2-h3, we cannot log in using our admin credential on the GUI. We are getting error "Invalid username or password" and "Your login session has expired and you have been logged out for security reasons. Please l

Blocking Bluetooth

Hello, 

I want to block blueotooth activities on endpoints in Cortex XDR. Is there any way or rule to do this? If yes, can you write rule?

Thanks in advance. 

Saas Quality and Traffic Distribution Profiles in SD-WAN for Dual-ISP

We have a few firewalls with dual-ISP and they all are part of SD-WAN VPN cluster. 

The goal is to have active-passive ISP links for all traffic to internet (And IPSEC as well), with primary being 1gig fiber, and secondary being asymmetric cable in

How to calculate max concurrent session and new session persecond in firewall

Hi

Please help to calculate ma concurrent session and news session per second in firewall

11.1.4h7 and 11.1.5 h1 high cpu

Hi

Ugraded 11.1.4h1 to 11.1.4h7 On PA440 and PA415,  causing high both planes cpu.

rolled back to 11.1.4h1 fixed 

Upgraded to 11.1.5h1 - same issue.

Rolled back to 11.1.4h1.

Wait time

What's up with the horrendous wait time to speak to a tech regarding a case?  Been on hold for over two hours.

Cortex XDR on Citrix non-persistent multi-user server

Hi community

Quite often we have issues with cortex xdr on citrix infrastructure. Currently meinly with windows server 2022 we are in the situation where it is not possible to run cortex at all because of possibel servercrashes which are not yet anal

Best way to restrict software by digital signer

hey guys, i'm not clear how to block the running (installing) of certain software using XDR by restricting by digital signer. 

Is it possible to cerate a BIOC and apply to a restricted profile? If not, what would you say is the best way to go about th

Container Base images

In Prisma cloud how do i track base images. that is the know who is using the defined base images and who is not using them. like can i get a list of all containers leveraging the defined base images? 

BIOC Block executables based field "Process_File_Info"

Hello,

I would like to know if any of you have struggled with support and technical cases with the need I show below.

I would like to know what you can tell me or give me your opinion of blocking executables based on static metadata using the “Proces

Any big issues with preferred release 10.2.10-h9?

Hello. We're preparing to upgrade ~20 firewalls (mix of 800-series and some VM series) to 10.2.10-h9 to address CVE-2024-0012. Wondering if anyone is running 10.2.10-h9 now and how things are working? Any issues with Global Protect? We're heavy users