Can't access management when PA200 is in line

I have a PA200 and when I only have the management port plugged in, I can access the management interface. When I put it inline and have production traffic running through it, I'm no longer able to access the management interface. I have two NAT rule

Panorama auto-commit fail

Hi guys,

 Have you ever a problem with auto-commit on panorama caused by the reboot of "configd" process ?

Thank

PA-5060 OSPF neighborship flapping after reboot

Hello everyone,

Having an issue with OSPF neighborship constantly going up and down after reboot. Please see below:

Has anyone had a similar issue?

Thanks,

Myky

Active Directory group naming scheme

Hi all,

I'd be interested to here is anyone has come up with interesting naming schemes for AD groups used within Palo Alto firewall policies.

I'm looking for inspiration as I'm looking to come up with a logical scheme on our end.

Cheers.

Local admin account locked

I have a cluster of two Panorama systems.  When I try the local admin account on the primary-active node the system generates a log entry saying that 'failed authentication for user admin.  Reason: User is in locked users list.  The same account name

BGP "no enforce neighbor-as" option?

Hi,

Is there a configuration avaialble to not enforce the requirement of a BGP peer including their AS in the advertised path?

This is required in peering exchanges where there are central route servers which function transperantly by advising of nex

SSL Inbound Inspection

Hi,

I have setup a decryption policy to decrypt inbound SSL traffic for the Exchange web mail server. However, when I check the logs I see only some traffic as decrypted and some arnn't. Refer below screenshots,

Why isn't the policy not decrypting all

GlobalProtect with X-Auth split tunnelling

Hi guys,

I'm working on a GP portal and gateway configuration, in order to provide to the customer full compatibility with the old vpn clients (ex: cisco) I enabled X-Auth support on it.

The client with a third party software authenticates but it alwa

HTTP2 and PAN?

Do PAN firewalls  support inspection of HTTP2 traffic in the same way as they do HTTP1.x?  I am curious because HTTP2 has three main improvements in this version, and I could see these the following two features potentially causing issues for HTTP1.x

PA-200 Renew Certificate Error "Failed to read issuer certificate"

Hello Community,

i receive the following message after i "renew" my certificate for the next 365 Days.
What can be the reason?
Any Ideas?

Best regards

Y.Reichwein

Please tell me why send a email with BMP image will judged to be a threat?

Please tell me why send a email with BMP image will judged to be a threat?

The firewall will show up a threaten sentence, during the sending job..

Please help me here. Thank you.

Threat Details： Name: IBM Lotus Domino BMP Parsing Integer Overflow Vulne

what is the difference between Botnet report and DNS Sinkholing?

HI All,

what is the difference between Botnet report and DNS Sinkholing? we can see the botnet reports to identify the infected machine by identifing the connection requests to the malicius URL repetedly, please help me to understand this.

Thank you,