Licensing DNS Security

I am trying to register our DNS Security. I have the purchased Auth Code, but I cannot where to add it in the customer support portal. I tried to add it under PRODUCTS --> Assets. My part number is PAN-PA-5220-DNS-5YR.

PAN OS LDAP producing DCOM 10036 error on all servers

Seems not long after PAN OS upgrade to 10.1.3 we started seeing errors in our system event viewer logs for DCOM 10036 coming from our account that we use for LDAP on our PAN OS.  They all reference the IP of our PAN OS as the originator. The logs are

Do PAN TAC even read the content of the ticket?

This has happened more time than I can count, and I have Platnium support.

I work in the US Eastern time zone 8am-5pm ET and every time when I open ticket with PAN support, I always put in this line at the beginning of the ticket:  "I would like to

HA timers value - Monitor Fail Hold Up Time - Additional Master Hold Up Time - Doubts

Hello Live Community, good evening, thanks a lot for your time and colaboration.

I have a question regarding the value of "HA timer - Additional Master Hold Up Time" by default is 500 ms. In the documentation it indicates that this is an additional

SSL Decryption - replacing Forward Trust Certificate not working for IOS devices

Hi All,

The Forward Trust certificate on a PA-820 firewall pair was expiring, so we issued a new SubCA certificate from the Windows ADCS root CA server and updated it on the firewall. The certificate was imported with a 2048bit key and there is a pas

Response Page not displayed when using security policy to deny URL category

Hi There,

I have configured a security policy to block a URL category using the Service/URL Category method and my action is deny.

This works and the category is denied, however the block response page is not displayed. Instead i get "This site can’t

nailing up an ipsec vpn?

I have a site to site ipsec vpn between two Palo firewalls.  A always initiates the tunnel to B. Is there a way i can make A always keep the tunnel up even when interesting traffic is not present?

Interzone default deny rule with logging is allowing traffic and shows up in traffic logs

We have a PA-3220 which is running in 10.2.4 Pan OS, we observed something really weird in the traffic logs this morning which shows 'ms-rdp' connections allowing through the default interzone deny rule which we re-verified again to see it is still s

IPSec Child-SA rekey negotiation fails

Our customer encounter intermittent connectivity issue with IPSec IKEv1 during phase 2 rekey of IPSec Child-SA. We open case with the IPSec peer device vendor, they mention that PAN is not sending message to R2011 (IPSec peer) for deleting the SA whe

Configure L2 service on Active-Active Mode

I'am using PAN-PA-3220

We want to setup this model with:

1. HA (active-active)

2. Interface configuration using Layer 2 configuration

Is it possible to done it?. as when I try to create Layer 2 configuration. It always pop out error "Layer 2 unable

SSO not working properly

I have just setup SSO in our new eng panorama. When I tested it initially it gave me the error message "Error Displaying SAML error response page". I reached out to our team and it was noticed that the new saml app had fewer claims and attributes tha

Certificate delete

Hi

i have a problem certificate delete. But sow error Failed to delete Certificate - CaptivePortal.  °  CaptivePortal cannot be deleted because of references from:

i look to to ssl/tls service profile list not show profiles. plase help mee 

Clarification on App Rule - I thought I understood this

I recently moved a firewall into being managed by Panorama.  I setup an Application rule specifying the application as PANORAMA which includes the ports necessary (I assumed) for Panorama communications but the firewall could not be added successfull