Inbound Policy-Based Forwarding Issue - Intermittent loss of connectivity

Hello,

Got a strange one, that I am hoping someone with deep knowledge of PBF and symmetric return can advise on.

We have two (2) virtual-routers due to two different ISPs.  The history of it is we are migrating off of one ISP to finally decommis

Newly-Registered-Domains

Hi Everyone

We recently implemented Advanced URL filtering at our University, one of the categories we have blocked is Newly-Registered-Domains, we created a custom URL group and implemented dynamic lists for the infosec team to add exceptions and

Palo Alto HA firewalls like for like replace

Hello Guys,

I have a project to replace palo alto with another two palos they are configured as HA and i want to get all the cli commands in one go and past it into the new firewalls ? will that work? 

who knows what is the command that we could do

Action is Reset Both in traffic monitoring

The user was trying to access the Proofpoint links it is not accessible in the firewall. We could see the action is reset both in monitoring and a session end reason is policy-deny and checked the threat logs but we couldn't see any logs in the threa

The panorama encountered a commit failure: "failed to create sdwan cluster meta file: object of type 'NoneType' has no len()"

Hi team,

While configuring PanOS SD-WAN, I successfully added the firewalls as managed devices to Panorama and installed the SD-WAN plugin version 3.1.2. Subsequently, I included the devices in the SD-WAN configuration, activated BGP policy for autom

Abnormal display of traffic log BYTES filed

The customer found that some traffic logs have extremely large bytes, reaching 281.5T,

Looking at the log details, it was found that:

Question 1：

Details:

Type end

Bytes 281474976579754  ---- I think this is an incorrect display?

Bytes Received

Application Shift and How to allow linkedIn but block specific linkedin-posting application

When you want to allow the linkedin-base application with a specific Security Policy Rule, for example Linkedin-Rule, the Implicit applications it depends to are automatically allowed by the firewall, this means that the Security Policy Rule Linkedin

How to check if a specific port/servic is getting passed throgh the firewall to a specific Public IP address

An IT Auditor stated that SNMP is listening through the firewall for a specific Public IP Address.

I have been filtering the network traffic on the PaloAlto 3020 for that specific IP address and also filtering with port 161.  BUt Id not see any res

Decryption: Client and decrypt profile version mismatch

Hi folks,

Have been seeing a lot of "'Client and decrypt profile version mismatch. Supported client version bitmask: 0x08. Supported decrypt profile version bitmask: 0x60. ' errors in the log lately. This article:

https://docs.paloaltonetworks.com/

My PA-450 is not showing Network activity in the ACC tab

Good Morning!

I am not seeing any network activity in the ACC tab for my 450. I've cleared all filters just in case, restarted the management plane, I even failed over to see if it was isolated to the one unit. Both are showing this. When I set the

Custom EDL List not getting Populated

Hi Community,

   Have configured EDL IP & Domain's list. Test source URL is accessible but its not showing any entries in the list.
   In IP list it showing only 0.0.0.0/32 but actual list is not showing.

   Please advise.

Pan OS version: 10.2.7

Active/passive failover validation was performed using Azure HA configuration getting failed due to Azure token failed with exception <urlopen

I have a palo alto VM- 300 firewall(active/passive) with version 10.1.11-h4.which is hosted in France central azure region 2 availability zone and the azure environment.

While doing Azure HA failover validation on active/passive firewalls and validat