"Only self signed CA cert can have identical sub and issuer fields" when uploading a certificate

This message appears when uploading an external CA certificate to the sistem. "Only self signed CA certificates can have identical subject and issuer fields". It's a Microsoft-adfs autosigned CA certificate used to sign SAML messages and we can't not

Whatsapp video calls block

Hi,

I need to allow calls via WhatsApp but deny the use of video calls.
Is there a way to do it?

HA sync fail, not normal

Need sync help. About two months ago we noticed our passive 3250 would slowly not respond. It finally died, no console response. Opened ticket, had one RMA, powered it up. Imported the saved config we took before it died. Checked ip's, management set

GlobalProtect Split DNS configuration

I'm looking to configure split tunneling and DNS in the following way:

If the DNS request is from a defined list, send the query to the tunnel DNS servers, if not, send through local adapter DNS. If the resulting reply contains an IP in the defined

Find the source for "DNS amplification attack response"

Hello,

We receive many "DNS amplification attack response" alerts with the source of our internal DNS servers toward public DNS servers on the Internet. How can we know whether these alerts are not false positives and if they are true positive, how t

Global Protect - SAML Authentication Complete Page

We're testing upgrading to version 2.5.x and have run into a few changes with the new features.

We enabled "Use Default Browser for SAML Authentication", because you know ie, is going away.  After doing this, each time our end user authenticates, the

Problems accessing knowledge base

Problems accessing knowledge base

Gentlemen, good afternoon.

I'm having trouble accessing the knowledge base, could you please check?

Thanks

eventid eq tunnel-status-up/down

Hi Team,

We run the command eventid eq tunnel-status-up / down but we dont see any output under Monitor>system. What is the reason? two days back we see the went down and see the DPD log as well but still no result for subjected command please sugg

dynamic update failed

We are facining issue on dynamic update. dynamic updateds are failed.

How to make white list policy on file blocking palo alto

I have Palo Alto PA - 5520 Series

when the user uploads a file, I want palo alto just allow file in jpeg, png, xls, xlsx, pdf type. and blocking other file types.

because my server has an incident, it receive file type phar and php (malicious file) b

After Upgrading our PA-820 to 11.0.2, we're seeing lots of data on dns-base application.

After Upgrading our PA-820 to 11.0.2, we're seeing lots of data on "dns-base" application.  In a 24-hour period, I'm seeing 5PBs+ of data coming through, which is way over our limits for our internal network (two DNS servers at 1GB NIC each) and exte

Deactivate BFD option

Hello,

I need to disable the BFD option, can anyone tell me the best steps to follow?

I also need to know the implications that may occur when I disable the BFD option.

thanks

Help support

Dear Palo alto family,

I  face some difficulty  to  ping internet on DMZ , i am trying to configure a security policy  DMZ_to_Public/ WAN  but still i didn't ping 8.8.8.8  in DMZ switch and  didn't ping  in firewalls  itself also.

Help me to solv

Group Based network policy not being blocked.

Hello,

I have an openldap server setup as well as an LDAP policy and group mapping on the Palo Alto firewall.

When I run the 'show user group name "cn=employees,ou=groups,dc=brillnet,dc=com". I can see the users in the group just fine. Refer to t