PA- Security Policy Destination as FQDN issue

Dear Community,

I am facing an issue were the i have post security rule allowing the access to some FortiGuard URLs, on the other hand i am have a default deny rule with reset-both action right above to the interzone & intrazone policies. What actu

Unable to access HTTP & HTTPS

When I switch from passive to active, I can't access the application via http and https. But I can ping and telnet the application via port 443

Split Tunnel - Exclude Client Application

Hello,

I am setting up a new Global Protect gateway.

We previously havent setup Global Protect (GP) before with Split tunnel so this is my first time and its not going smoothly..

i am trying to exclude client applications for some software we use. bei

videoparse.jar detected as Grayware

"videoparse.jar" is detected as Grayware in Wildfire but not found now.

why this was flagged malicious ? 

File hash : 844ccde43fa61803f1643401600e17dced86c60509ee340ae83b332a068f8dcc

VirusTotal - File - 844ccde43fa61803f1643401600e17dced86c60509ee340

[Error]: Failed to create exclude route in Global protect

Hello All,

what could be the issue when user is not able to connect Global protect and we can see [Error]: "Failed to create exclude route" in  pan_gp_event_log.

latency Troubleshooting

We have a load increase following the unblocking of an application's url. How can I troubleshoot for finding what's causing this?

HA Pair - peer version too old

I have two hardware gateways in a HA pair running 9.1.19.  Ive upgraded one to 10.0 and then to 10.1.14.  It now complains that the HA 'peer version is too old' and it has suspended HA.  If i suspend HA on the remaining 9.1 gateway, HA doesnt activat

Build in tool to test throughput

Hello experts,

Im wondering if Palo Alto firewalls have a build in tool to test throughput on specific interface. We are trying to use iperf on an endpoint and test channel utilization from the firewall or if possible, firewall acting as iperf serv

Vulnerabilities

The vulnerabilities which it will show in vulnerability assessment are live or any particular time the data get updated?

Upgrade path from 10.1.13-H1 to 10.2.11-H3

I was trying to upgrade to 10.2.11-H3 and when I upgraded to 10.2.0 and then I couldn't upgrade.

PAN-GPLimiter: Limit Concurrent GlobalProtect Sessions/Connections Per Unique User

PAN-GPLimiter: Limit Concurrent GlobalProtect Sessions/Connections Per Unique User

Hi All,

I would like to introduce my Go program for limiting concurrent remote user logins in a single GP Gateway on a PAN-OS Firewall.
(Keywords: Limit the maximum

License for feature lcaas will expire on 2024/10/30

From the system log, i find a log severity is Critical.

The message is 

"License for feature lcaas will expire on 2024/10/30"

what is lcaas ?

how can i deal with this message ?