PA-3020 Dataplane 100%

We have aggregated ports for the PA to "handle" what Consolidated has for us on a 2GB circuit.  Is this a case where our 3020 can't handle the traffic we have or is excessive logging a more likely culprit.  GoldSeal has our support and the need for i

Mnonitor SNMP % packet buffer congestion

Hi,

Is possible to monitor by SNMP the value for the % packet buffer congestion? i can not find this in PA MIB.

thanks

Decrypting WhatsApp traffic and blocking file uploads possible?

Hi,

So we want to block file uploads on WhatsApp but since it's encrypted, I doubt this can be done, however, can PANOS decrypt WhatsApp??

I ask because WhatsApp doesn't exactly use SSL right, it's more of a PGP sort of encryption, can we decrypt tha

HA mistake after update to 10.2

FW1 10.1.4 è Download 10.2 and synch to FW2

Download OK Sync OK

Setup 10.2 on FW1 and reboot ==> FW2 begin Master.

Check FW1 reboot OK 10.2 online OK.

FW1 ==> Master

Setup 10.2 on FW2

Reboot ==> Lost access on management interface.

• Disconnect Wan int

Problems with Windows User-ID Agent and the normalized Users

Hi together, 

I have here a Windows User Agent (tested with Version 9.1.1-8 & 9.1.2-9), which has connected to one Active Directory (MS2012 R2) where they scan the events. The rights from the agent user looks good and they find many client users. But

PA-460

Hi,

I need assistance for PA-460 HA1 and HA2 connectivity. PA-460 doesn't have dedicated HA1 and HA2 ports. And please let me know do we need dedicated links for HA1 and HA2 between two devices ?

Regards,

Suresh

Help With Configure PA-220

I am trying to build firewall from scratch. Our use case is to secure 3 servers with separate DSP connected to PA-220. We do not have any managed switch or router between ISP to firewall. It is direct from modem to firewall.

Can anyone help with this

Traffic monitor incomplete

I've got a new Global Protect portal/gateway.  When I get connected to the gateway, I can see the connection via the GP monitor.  Then if I go the to traffic monitor and search the source range 192.168.203.0/24 I only get traffic from previous testin

I cannot enter maintenance mode on a PA-220. I recycle power and have console cable connected - tried USB and also roll-over cable. Tried 3 different

I cannot enter maintenance mode on a PA-220. I recycle power and have console cable connected - tried USB and also roll-over cable. Tried 3 different software emulators - Putty, TeraTerm and Mobaxterm.
When it comes enter Maintnenance Mode no prompt c

URL FIltering

I was curious if anyone knows why even when traffic is flagged as a threat by URL filtering there are still packets being sent and received?