SSL decryption feature

Hi All,

I wish to ask do i have to have my own Certificate in order to use SSL decryption feature, in order to decryption my users SSL traffic ?

OR i can just go and setup this feature and use it right away ?

I use PA-VM-100, PAN OS 6.0.4

Difficulties creating a secondary VPN tunnel

I'm having trouble authenticating with a second VPN tunnel that I've created.

I've created a new Portal and Gateway, almost identical to the previous ones. Obviously with it's own external IP, certificate that fits the given domain.
Created a new Zone

Disable SSLv3/TLSv1

Is it possible to disable SSLv3 and TLSv1 for Global Protect?

Vulnerability scanners flag the interface of the PAN where Global Protect portal/gateway are hosted as it allows these deprecated versions.

HA broken after upgrading to 6.0.3

Hi,

We have just upgraded our 5020s and 3020s to 6.0.3 and encountered an issue, where the secondary device became the Active one and the primary displays this error, only on the 5020:

does anybody else had this issue or knows how to solve it?

Thank you

HA queue full

Hi, im receiving this snmp trap in my Palo Alto (PA-3020 PANOS 6.0.3). Checking the system logs i see each 15 mins this log message "HA-queue-full". Why is this happening?

HA queue is full

Hi there,

I'm not sure if anyone else has seen this alert show up on their devices but I have Critical system messages sent to me by email and I have received this afternoon every 15 minutes a message saying "HA queue is full". I made a small tweak to

Failed to execute op command

We frequently face an error for fetching the group-mapping in the user-id tab. The error is normally shown up as failed to execute op command. One of the reason can be invalid credentials in the ldap configuration

Troubleshoot this error with Tail fol

Turn off Application ID globally?

Can one turn off the application awarenes globally to set up a PAN as a L4 firewall? Trying to get some comparison stats against the old L4 only (non PAN) firewall and the new PAN.

thanks.

PAN Dual ISP Failver Best Practices

I have setup dozens of PANs with multiple ISPs and failover but have some questions in regards to best practices..

1. Is PBF the only way to handle failover? If not, can the same be achieved via HA Link/path monitoring or is that specifically for devi