Device Certificate Expired 'Invalid Request. Authentication Failed'

Hi Everybody,

I have 4 firewalls grouped into 2 HA pairs. The first pair had certificates which expired on August 18 and have failed to be renewed. The last fetched message says "Failed to renew device certificate. Invalid request. Authentication f

DHCP issue

Hi Team,

Customers have PA-220 running 10.0.0 and migrated to PA-1410 running 11.0.1-h2
from PA-1410 - 11.0.1-h2 unable to get DHCP ip from the firewall for Android and iPhone devices. The same devices are getting IP from PA-220 running 10.0.0 version

ION device issues

So twice now in the span of only a week it looks like we have to RMA an ION3000 and ION2000 device after the site lost power due to local Storms. After power was restored our ION's can't connect to the SD-WAN cloud, I can't access the devices remotel

Fix weak cipher on Panorama itself

Hi, i am trying to find an article on how to fix a weak cipher suite on Panorama itself but to no avail.

Does anyone have any idea and is there is KB out there who can assist with this?

Panorama 

Firewall Down Can't Override Panorama Managed Policies/Settings

Last week we lost one of our sites Acitve/Passive firewalls.  An event appeared to happen, that caused the firewalls to try a failover.  However the failover failed, and the firewalls were in a "hung" state.  When I had smart hands plug into the MGT

Pre-Site Survey

hello 

I am preparing to go to site for a PA 440 install 

Q has anyone used a pre site capture document that could be sent to the customer ahead of the install ?

for example a best practice document to capture 

number of zones 

security features 

e

Cortex XDR report template query.

We have created a report template in the Cortex XDR console for endpoint status. The creation was successful, but the generated report only displays the endpoint status in an Excel format. However, we would like to view the endpoint host list status

Dual ISP - ECMP and/or PBF

So may be a 2-part question.  First, we have 2 ISPs both equal bandwidth so I've setup ECMP using IP Modulo do i need to set up PBF, or is that if you don't have equal ISPs?

2nd and the real issue.  One of my applications that is tided via public d

How to Identify If there was an allowed traffic from external suspicious IP in Panorama.

Hello All,

I'm a bit confused to understand the exact process. When monitoring the traffic from an external source ip (malicious one) and checking the logs in Pano see that session end reason was "tc-fin" and type was either "drop or end" with action

Palo Alto Networks Updated Visio Stencils

Palo Alto Networks 2017 Updated Visio Stencils.

::edited by @reaper the official article can be found here ::

The stencils can also be found here: http://www.shapesource.com/palo-alto-networks-visio-stencilsource.com/palo-alto-networks-2

Enjoy