Palo alto certificate error?

hi all,

I am using PA-850 and configure certificate decryption. I am having the problem with this. when I configured to decrypt for any source, client would get the error "ERR_SSL_VERSION_OR_CIPHER_MISMATCH", and could not access to any websites. 

Bu

Firewall stopped sending traffic to internet from trust zone, after upgrade from 10.1.3 to 10.1.5h2

I have upgraded 3 set of palo alto PA-3220 (3 pairs) to 10.1.5h2.

Two set works good without any issue.

When upgrade completed with last set, the active firewall stopped sending traffic from trust zone to internet, though it has all valid routes in it.

User to IP mapping for LAN with computer on hybernet/sleep

I have Palo Alto firewall and implemented the user ID in our environment. I am looking for some help on specific use case. I am hoping to get some answers/guidance for the same.

Firewalls : PA-820/850 as well VM-300

PAN OS : 9.1.13-h3/9.1.9

I have ins

Some users have pre-populated usernames in global protect VPN client

Hi all,

I was wondering if anyone else has seen this.  There are about 3 users that I know of that are having user credentials pre-populated in global protect that are incorrect for the VPN login.  We can't seem to clear this, and even if we do a res

Palo Alto content apps update 700 800 compatibility 8.0.X

Palo Alto content update 700-800 compatibility 8.0.X

Hello good evening, thanks as always for your support, we have the following case:

-A device firewall version 8.0.X was manually installed a content update of Apps, current version 8563-7374.

-After t

Cannot log into firewall if authentication profile specifies an AD group instead of AD username

So last Thursday we upgraded our PA-5220s from 9.1.10 to 10.1.5-h1 and everything went incredibly well - absolutely no issues during the upgrade. About 15 hours after the upgrade was complete, we suddenly could not log onto the firewalls with our LDA

PAN-OS 10.2 : filter incoming OSPF routes

Hi,

We are trying to setup OSPFv2 between a PA-5220 in 10.2 and a Cisco ACI Fabric with "Advanced Routing" enabled.

For now, we are able to advertise routes to our ACI Fabric, we can filter outgoing advertisement but we are unable to filter incoming r

Page redirect to Captive Portal login when opening video on youtube

Hi Expert,

Browser redirect to Captive Portal login when opening video on youtube.

Is there any idea why it is happen?

Upgrade PA stuck

Hi All,

We try to upgrade PA5220 and it has been stuck quite long time. 

We tried to upgrade to 10.1.5h2 from 10.1.0.

Any possible reason might cause of it? 

403 Forbidden

I've run into a strange issue with the following website  https://dvir-prod.aws.drivecam.net. When Users attempt to access it they are getting a 403 Forbidden. I'm not seeing an drops in the logs, and the packet captures don't point to anything eithe

Remove a site from from Palo Alto's blacklist

My client's site, a Canadian site that prepares school supply kits, edupac.ca was hacked badly a few months ago. But we manually removed all malware files. We abandoned the original infected file base, restoring from backups, and now the code base is