Global Protect lose internal resources access

Hello everyone,

I hope you can help us. We have some users who are connected to global protect, but from time to time, they lose access to the internal resources. When this happens, they have to update the connection in the GP client to be able to ac

Outbound SQL traffic (possibly) hitting a zone protection profile

We have a process that sends MSSQL (1433/tcp) to a cloud service that occasionally just stops working - so trust to untrust. It is mostly on 'larger' data transmissions. Turned off all the flood protection in the zone protection profile on the outsid

4.0.8 Object Name Change Not Updated In Policy

I used to be able to make changes to objects (address/groups/application groups) ect. But now when I made the change I have to go through my policies and NATs and update them manually. Any ideas? Is there an update object option that I'm not aware of

Strata Cloud manager gateway traffic on cloudfront.net failing

No blocks observed but US gateways are dropping the traffic going to ohio.gov were as the UK gateway it works. The logs do not show any blocks. Any ideas how to troubleshoot would be helpful. Opened a TAC case however its dragging out for 3 days now

Is there a way to export all the certificates present via the API?

Is it possible to export all Certificates at once from a Palo Alto Firewall via API? Without having to pass the names of the certificates from the API call, because in the documentation I've only seen it possible that way.

PVLAN

Hello. I've been trying to use PVLAN with palo alto. I have two isolated host which are on the same subnet and wanted them to communicate through palo alto. I was able to manage with a switch using local proxy arp but from what I've searched palo alt

Is there an off the shelf power supply for the PA-450R?

My PA-450R did not come with a power supply and has the phoenix connectors for connecting power to it. Is the an off the shelf power supply that is recommended for this unit or will I need to supply my own power?

Unique Threat ID: 85253 increase in false positives since last update

Hi there,

Has anyone noticed an increase in false positives with Unique Threat ID 85253 since the update 8971 (2025-04-28 UTC)?

We are experiencing a rise in false positives but haven't opened a ticket yet.

Thanks,

Daniel

Custom Logs / Path Monitor Alert

Hello!

I may be trying to do something impossible, but it seems like the configuration elements are all there.  We have a static default route to our ISP that is set with path monitoring so that we failover to a backup route when the gateway is unr

resources-unavailable for DNS-base traffic

Model: Palo Alto PA-3420
Software version: 11.2.4-h1

Most of our dns-base traffic has the "session end reason" resources-unavailable suddenly. We're also having trouble loading webpages. The resources-unavailable reason is only on DNS-base traffic a

ECMP breaks secure email access.

Hi all, 

while using ECMP for the last 2 years without any issues using 3 ISP's with different weight and enabling Symmetric Return and Strict Source Path, I found that some sites with authentication access and Proofpoint secure emails access are bei