Upgrade to latest 7.0.x or 7.1.x?

Hi,

we are planning to upgrade our 3020 A/P Cluster to latest PANOS (7.0.x or 7.1.x). Currently we are runing 6.1.13.

We want to do more SSL Decryption (Inbound & Forward Proxy). What are you thinking is the best and stable release for 3020 A/P Clust

Inactive session reports

Hello,  is it possible to run a report that shows the elapsed time for a session going outside the network? 

Basically showing any sessions that have been connected for more than 24hours? Most likely not based on default timeouts but just to confirm

T

with session offloaded packet will not go through dataplane ?

how will that packet flow ?
what does offload processor exacly do ? understanding of it
why it needs APP-ID completed

Forwarding lookup in Slow Path is done to get egress zone Packet capture

Could someone help me understand on basis of packet capture how using forwarding lookup egress interface is determined

Thanks In adavnce

Thinking about blocking executable file downloads - Gotchas?

In our environment, we have eliminated the scourge of people being local administrators on computers, with the exception of administrative accounts assigned to some of the IT personnel.  I'm thinking about blocking the DLL, DMG, EXE, MSI, and PE file

Switch from Static to Dynamic Address Object Groups

Hello all,

we are running into an issue where we are unable to change static address object groups  to dynamic address object groups

We have an M500 and several PA7050 and the objects are managed under the "shared" device group for all the PA7050's. W

Panorama VM with M-500

Hello,

I have a panorama vm with Log collectors m-500

the question is that I want to use Eth1 and Eth2 for the log collector and collector group communication. Can I do that with Panorama VM?

I mean, I know that Panorama VM does not have Eth1 and Eth2.

VM Monitoring for Dynamic Address Objects not reading Annotations

We have VM Monitoring of vCenter setup and are trying to leverage the ability to read the annotations field in each VM. After testing we found the match criteria annotations.*input custom txt here* is only reading the “Notes” field and not the “Annot

GlobalProtect VPN usage reports?

I'd like to generate a scheduled report of all the GlobalProtect VPN users connected in the last 24 hours. Is this possible to create in Pan OS 7.1?

Userid agent version for PAN-OS 7.1.6

What is the proper Userid agent version to be used for PAN-OS version 7.1.6?

Is it possible to "whitelist" a source in zone protection profile?

Some of our networking tools are triggering ZPP actions.  Is it possible to whitelist a source so that thresholds in reconnaissance protection are not triggered?  Altering the thresholds would make the recon protection basically ineffective.