Session created by Syn Cookie

Hello,

what process and what is going on if a session (SIP) is created by "Syn Cookie" ?

Is this a valid Session, does this indicate a Problem ?

We configured an App-Override Policy to mitigate Problems between Phone-System and SIP ALG.

We see now all

IPSec site-to-site tunnel not allowing all traffic both ways

I followed the guides to set up an IPSec site to site VPN tunnel between our main office and satellite office using static routing, but I can't access our servers through the tunnel. From the main office, I can access everything on the satellite offi

Block Facebook Posting

Hi everyone：

PA Firewall seems to be unable to Block New Facebook posting.
Does anyone have a way to block it?

BR

Richard

GlobalProtect Xauth for iPhone and Android

Need Help deleting files on PAN /dev/sda8 and /dev/root

Hi All,

Need help on how to free up spaces on the below partitions on my PAN device, support cannot seem to figure this out. Please help..

Filesystem Size Used Avail Use% Mounted on
/dev/root 4.0G 3.4G 407M 90% /
none 4.0G 56K 4.0G 1% /dev
/dev/sda5 24G

install PanHandler on Windows 10 system.

Published install instructions for PanHandler are for MAC and Linux systems.  I run Windows.  Here is how I installed PanHandler on my Windows 10 system.

Install Docker for Windows from the Docker Hub -- https://docs.docker.com/docker-for-windows/ins

Device certificate

Hi all,

     I want to know, what device certificate is for and what it does?

Thanks !!!

"source user" empty in monitor log

I'm looking at an old version 7 PA3000 which uses a user-id agent to map users (active directory) to IP addresses.

When i log onto the firewall CLI  a "show user ip-user-mapping-mp all" command returns what looks to be a valid list of user mappings. 

Miner is polling continually but there are not events loaded

Hello everyone!

We have a miner pointing to a MISP. When it starts we load all events, after a while, we don't get any new IOC and the miner keeps pulling. A pulling_timeout is configured to 1800 but it seems not working well, we need to restart en

Disable Cipher Suite

As of the pen test via SSL LAB  i was observed that less secure ciphers like DES, RC4 were supported by global protect portal ,so that i have disable the all the weak cipher suite and it's successfully done but the when i disable CBC-256 Suite when i

How to inspect email contents within outlook.office365.com?

I have decryption turned ON for outlook.office365.com url but firewall cannot really inspect the contents that are inside the email. Is it because Microsoft encrypts the email and Palo doesn't know how to decrypt it? has anyone tried decrypting outlo

Strange behaviour of HA pair active passive

Today i've noticed a strange behaviour of HA pair of Pa820 (panos 8.1.6) in Active passive configuration.

In the dashboard page i've noticed the running config not in sync with peer.

So i checked the differences with the diff button and i discovered th

PAN-OS 8.1 Partial IPs Captive Portal redirect not working

Hi Everyone

I have some problem for Captive Portal redirect.

PAN-OS - 8.1

SSL decryption - enable

Authentication - Active Directory

IPs - 1000+-

Platform - 3250 Series 

the problem is partial IPs cannot get captive portal page to authentication, but parti