Traffic logs doesnot have a corresponding URL log

I am trying to perform some forensics into a user activty but Palo Alto logs are not really helping me a lot. I mean, I see a traffic for some IPs but when I click the maginifying glass icon, I see the category in it but not the actual URl. I have checked the URL filtering profile and it is set to alert.has anyone observed this?

Difficulty getting help Tried contacting administrative help for palo alto, was rereferred to TD Synnex, no solution, hung up on by palo alto next...

Add OSPF Route Tags

Hi, I need to amend my routemap redistribution filter to set a tag to the routes in my referenced prefix list. My question is, when doing this on a live firewall, will this require OSPF to re-converge? Thanks

Defining patch management in HIP objects.

Hi All,We are configuring global protect with HIP enabled.Our requirement is, If the patch defined in the HIP object is missing in client machine then access should be denied. Below screen shows the patches (windows updates) for windows 7 machine.From above snap i want to use the highlighted update as match in HIP object (If this update is missi...

Out of memory: Kill process xxxx (mgmtsrvr) score xx or sacrifice child

This is a recurring issue, a reboot helps for time being. When attempting to update to the latest antivirus version, we see that the commit fails. System resources look normal. And looking at the techsupport file in /var/log/messages, we see that during various attempts: mgmtsrvr, devsrvr, logrcvr were the killed processes due to out of memory...

Palo alto PA3060 high memory usage over 60%

Hi everyone, In our performance report, it is find some Palo Alto PA3060 firewall memory usage keep high than > 60%, which trigger resource alarm refer our monitoring standard. I tried action like reboot device but memory level remain more or less the same. May advise way that can lower memory usage, say, <60% I also try to following the...

Global Protect - SAML Authentication Complete Page

We're testing upgrading to version 2.5.x and have run into a few changes with the new features. We enabled "Use Default Browser for SAML Authentication", because you know ie, is going away. After doing this, each time our end user authenticates, they receive an "Authentication Complete" Page, with a cryptic message about opening Global Protect ...

Firewall reach 60%-70% memory usage , is it normal ?

software version v9.1.x is it normal for 60-70% memory usage

Source NAT Dynamic Pool mapping for inbound traffic

I have configured Dynamic NAT on PA- 3260 where source address is a VLAN with a certain IP range mapped to a NAT pool (Many-to-Many NAT Policy according to PA documentation). NAT policy is working fine according to the session logs. I can see the packet IP translation taking place for the outbound traffic. The concept I wish to understand here i...