DecryptSSL Inboundwith SSL app no

I have just configured SSL Inbound for two servers and I'm seeing some unusual behavior. I can see random connections where the SSL "decrypted" flag is set to "NO" for SSL application. However, when the application is web browsing, it is always set to "YES".

PA1420 HA Mode stucks in Initial (HA Initializing) mode for too long

HI All, We have an Active Passive PA-1420 which is connected together via H1-A and H1-B together. But when we restart the nodes or either of the nodes, the Passive PA stucks in Initial (HA Initializing) mode for too long. The last time i checked We restarted the devices at 12:25:00 and I last time checked 1:00:00 it was still in the same m...

I am looking for information about PAN-311601

https://origin-docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-10-known-and-addressed-issues/pan-os-12-1-10-known-issues PAN-311601 If the node is observed to be stuck with the “session clearing fault,” rebooting the node is the workaround to restore the node to an online state after all other fault conditions have been resolved....

GlobalProtect Release for Ubuntu 26.04 LTS ?

Hello together.recently was the new Ubuntu 26.04 LTS release, until now the provided GlobalProtect client supports only Ubuntu 24.04:https://docs.paloaltonetworks.com/compatibility-matrix/reference/globalprotect/where-can-i-install-the-globalprotect-app?otp=linux#linux When can we expect the new GlobalProtect version for Ubuntu 26.04 ? Best re...

How to disable Telemetry?

How do you actually disable this new cloud telemetry? Last week I performed a PANOS update on my cloud NGFW firewalls and telemetry was forced on. The blurb in the firewall says to visit Hub->TenantManagement or Hub->StrataCloudManager->Settings->Tenant, neither of which exist as a path. The built-in PANOS documentation page says n...

Palo Alto 1420 - Invalid username or password.

Dear all, We have face an issue recently with our Palo Alto HA pair. When we try to login with our 3 different admin accounts using web gui, ssh, and even consoel. it shows the same Invalid username or password I am more than sure that we have not changed the password at all. The only recent change we have implemented was the CIS Device H...

Throttling ingress bandwidth on a sub-interface

Hi, I need to throttle 2 BYOD VLANs. On the Palos, they are configured as a sub-interface of aggregate ports. The QoS option will only accept physical interfaces or the aggregate port, not sub-interfaces to the aggregate port. Is there a way to accomplish this? There doesn't appear to be. More information all the firewalls are managed b...

PA-3440 VSYS license

Hello All, How can I to get additional virtual systems for my PA-3440? Is PAN-PA-3440-VSYS-10 the only valid license? Is there any other license with less VSYS available?BR Andrzej

Traps For Expired Certificate

I am on 11.1.13 Does the NGFW or Panorama have traps for expiring or expired certificates? (Used for mgmt access and secure communications channel) I the trap below in MIB file for 11.1 however it does not seem to be triggering when certificate expires. .1.3.6.1.4.1.25461.2.1.3.2.0.3220 panTLSCertificateExpiredTrap

PANOS Integrated UserID with WINRM

Hello, I am trying to configure PANOS(10.1.8) Integrated UserID with Wndows AD 2016 (with Kerberos). I am getting "Access Denied" status under User Mapping --Server Monitoring I have validated that user is part of below security groups on AD Distributed COM Users Event Log Readers Remote Management Users Server Operators I see below log...

Clarification on Strata Logging Service and eDLP Log Forwarding

Hi Team, We are an MSSP and have received a request to support eDLP. Since we do not have access to these devices/services in our environment, we primarily rely on the available documentation to understand and support them. I have a few questions regarding how Strata Logging Service (SLS) works. We currently support Prisma Access using SLS. Wh...

How deactivate multi factor authentication