Install Apps,Threat fail

Hello,Team

PAN-OS：9.1.4;application and threat version downloads and installs, but never actually updates

I find ms.log:

=======================

2021-04-19 14:21:29.149 +0800 Error: _pan_mgmtop_content_upgrade_install_file(pan_ops_content.c:6189): error

Block the download of jre-xxx-.exe

I have been asked to develop a solution within our company to stop the downloading of all versions of Java (jre-8u291-macosx-x64) from anywhere on the internet as well as from internal file shares. 

 Because of the change in licensing, my company is

How to upgrade a Firewall out of support ?

Hello

We have an old PA220 for lab testing purposes. The firewall is currently running the 8.0.0 ver. We also have PA850 but in the support site I can only see the software download option for the PA850 and not for the PA220.

Can anyone tell me how

Expedition migration: Old paloalto NGFW (Panorama managed) to New one

Hi all, i'm trying to figure what are the correct steps to migrate:

Paloalto Cluster 3060 (9.1) Managed by Panorama (10.1) to a new Paloalto cluster 3410 (To be managed by Panorama).

This is my starting idea

1) Setup the 2 nodes in 1 HA Cluster (Setup

CAPTIVE PORTAL TIME-OUT

SETUP: PALO ALTO connected to ACTIVE DIRECTORY for groups
CAPTIVE PORTAL ACTIVATED 
idle time-out 500minutes
timer: 600minutes

CLI> show user ip-user-mapping ip x.x.x.x

SCENARIO 1: 
user log in to PC > mmp1234
CLI> show user ip-user-mapping ip 1.2.3.4.
Ip ad

PA-5020 product HW and SW EOL dose it effecting configuration of new policy after 30/1/2024 can't commit

hello, i've some question about PA-5020 product which is HW and SW (8.0.1) already EOL, is it the cause that i can't configure policy after EOL ? but the running policy still applicable. here is come information about what happen to me

everything i

I have to know PA-220 & PA-820 device End of life support details

I have to know PA-220 & PA-820 device End of life support details

Credential Theft Protection and SSL Errors

I am currenlty doing a proof-of-concept test for the Credential Theft Protection feature. SSL decryption is configured and working. I can get the system to re-direct to the Anti Phishing Continue Page. However, that page uses the SSL cert associated

Throughput means through show system statics session.

Hello all,

I checked the throughput information of CLI > show system statistics session as part of a way to check real-time traffic volume in Paloalto during migration work.

There was an inquiry from the customer about exactly what the throughput figu

allowing MS product activation and denying web access

I have a network that I want to allow MS product activation to work but web browsing and other internet activity to be denied.

I have two main security policies that apply just to this network although DNS and ntp is also allowed:

The first one is an a