Was on vacation this past week and have received hundreds of alerts from SCM that my firewalls are disconnecting from SLS. Haven’t opened a ticket yet l, will wait until Monday, but when I attempted to login in to SCM it was just a never ending SSO loop. Not sure if this is myself only or something bigger going on, on the Palo side.
Recently upgraded to 11.1.15 just to clear out some CVEs and after the upgrades each set of HA Palos and even are out of sync. If I make a change and commit that syncs but something from the upgrade is just stuck. I have opened a TAC but still waiting to connect. The diff shows pending changes related to MGT but there was nothing pending before the upgrades.
We are currently looking at the possibility of using Sectigo or SCEP to automate our Global Protect certificates but the problem we are running into is that the Portal and Gateway configs have pointers to the cert so the whole process cannot be automated or can it? Has anyone been doing anything like this?