Unable to view YouTube on HTTPS, for some people

For a long time we've had a rule that grants access to the youtube application (and its sub-applications) as well as the google-video-base application.  This rule grants access for people to watch YouTube videos if they are in a certain Active Direct

URL Filtering Time-Quotas

Hi,

We're planning to use the Palo URL filtering features to replace Websense.

Just wondering if it was possible within Palo to do any kind of URL filtering time-quotas?

For example, a user might be able to look at 'shopping' category sites for 60 minut

How to import Certificate using CLI?

Hello,

I'am trying to imort a certificat using CLI (set shared certificate AVF-ROOT-CA-2014 public-key command) but the device is only taking the first line of the public key. So i'am searching for the correct way to issue the command so that the CLI

GZIP File - Google Translate

Hi,

some users reported they are unable to use Google-Translate any more. I saw in the logs, Clients are trying to download GZIP files with the app google-translate-auto and google-translate-manual:

I'm sure, the users were able to use Google-Translate

Needing all help possible to upgrade our lab from PA-500 to VM-100s

Good morning,

I am John Hauser, a trainer for Fishnet Security, and I have been tasked with upgrading our lab environment from our old PA-500 hardware units to the VM-100 FWs.  I have very little VM experience both on the initial setup of the VM side

Has anybody encountered a situation where a rule was configured for one application but matched other applications?

I have the following rule

I used 'any' as the service because we have web servers running on multiple ports and not just on the default.

While it does match ssl and web-browsing traffic as expected,  it also matches unexpected application traffic like

mgmt appweb3[4591]: appweb3 error: : appweb3 ?

Hi,

My PA-2050 recently management cpu always high to 70%, and 100% when commit.

check the log as below,

appweb3 error: : appweb3: Error: Ignoring unknown directive "Action" At line 121 in /etc/appweb3/appweb.pan.conf  Make sure the required modules ar

SSL decryption feature

Hi All,

I wish to ask do i have to have my own Certificate in order to use SSL decryption feature, in order to decryption my users SSL traffic ?

OR i can just go and setup this feature and use it right away ?

I use PA-VM-100, PAN OS 6.0.4

Difficulties creating a secondary VPN tunnel

I'm having trouble authenticating with a second VPN tunnel that I've created.

I've created a new Portal and Gateway, almost identical to the previous ones. Obviously with it's own external IP, certificate that fits the given domain.
Created a new Zone

Disable SSLv3/TLSv1

Is it possible to disable SSLv3 and TLSv1 for Global Protect?

Vulnerability scanners flag the interface of the PAN where Global Protect portal/gateway are hosted as it allows these deprecated versions.