EDL Limit

How we can increase the External Dynamic List (EDL) max IP limit ?

For example: PA 3420 has 50,000 IP limit, how we can increase this limit in EDL ?

URL games allowed through while blocked

HI Gang,

Fairly new palo user here 

I'm having a headache where I have configured URL filtering to block students from accessing games. I have decryption in place however they are freely accessing those games (the site is both categorized as low

sudden reboot 11.1.6-h3

on 11.1.6-h3 we have multiple firewall that reboot suddenly. 

In the "fault.log" I can see the following error: 

"core: [Hardware Error]: CPU 0: Machine Check: 0 Bank 0: " 

The error is logged few seconds usually before the reboot. Anyone knows if th

NGFW Blocking Router Login Traffic After Policy Update – Requesting Guidance

Hi Community,

I’m reaching out for help with an issue I’m facing on my Palo Alto Next-Generation Firewall involving router login and network access control.

Issue:
After updating security policies to improve our network posture, I'm noticing that  route

Service Account used for UserID Agent

Hi Support Team, We need to ensure the service accounts used for the UserID agents installed on the domain controllers have the right active directory permissions and limit the permissions to what is required for them to function. I have the followin

Issue with Path Monitoring on Secondary ISP in Palo Alto Setup with Three ISPs

We’re using three ISPs (Primary, Secondary, and Tertiary) in our Palo Alto firewall setup:

• Primary: Ethernet 1/1 – Metric 10 (Path monitoring enabled with conditions set)
• Secondary: Ethernet 1/2 – Metric 20 (Path monitoring enabled with conditions set

AZURE Entra MFA for admin access via CLI

We are easily able to setup MFA for the Web UI for the management port vial SAML and Entra SAML auth. We have run into some challenges I was surprised exist. First here are the requirements and goals

• PA VM series firewalls in  AZURE.
• No On prem AD, IS

Pa220 begginer

Hello all, 

 I am a new with this field for firewall pa220 .

However i have one mikrotik which the port1 is connected with ISP , port2 on mikrotik is connected with my switch .

How can configure the firewall? How to start. All replys as welcome and i wi

Palo Alto Explicit Proxy Traffic Issue

Hello Team,

We have configured the Palo Alto firewall as an Explicit Proxy using Kerberos authentication in alignment with the Admin Guide. However, we’re noticing that the designated traffic is not routing through the Proxy as expected and is failing

To force NGFW login using SAML/SSO

Is it possible to use SAML/SSO login instead of manual credential username/password. 

Currently in the GUI page, we can either use manual credential / and SSO, but is it possible to force Admin to used SSO method instead.

Different DNS Servers

Hello,

We have a lot of servers in production (PRD) and development (DVE) domain.

Servers in PRD domain use our internal PRD-DNS-Server and those in DVE domain use our internal DVE-DNS-Server. Our PA-5400 series firewall is considered to be PRD domai

User Identification Agent Error Access Denied

This is the error I'm getting when I have runed a command

- less mp-log useridd.log

2025-05-12 13:56:46.879 +0530 Error: pan_user_id_win_wmic_log_query(pan_user_id_win.c:1688): log query for AD-Server failed: NTSTATUS: NT_STATUS_ACCESS_DENIED - Acces