Resolved! Windows Update Traffic (ms-update) being recognized as web-browsing

Hi Everyone,

I have an issue that I haven't been able to resolve.  I have a small domain setup with a Windows Server Update Service that is located in a DMZ.  The machinges that are in the inside network (trusted), are setup to pull their Windows upd

Resolved! To use Custom URL categories require a URL filtering license?

We are trying to use DNS wildcards and Custom URL categories to restrict access to certain machines in a security policy. We cannot get it to work and I cannot find any docs that a URL filtering license is required to use Custom URL categories. I hav

Resolved! cortex xdr agent connection problem

hi everybody,

we've installed cortex xdr agent on a terminal-master server which gets cloned for distribution

xdr-agent on master has active connection to cortex-cloud

but cloned servers can't connect...

xdr-log:

Resolved! Management IP in Active/passive setup

Hi 

I am quite new to Palo Alto firewalls, but have worked with different vendors before. 

When running a HA in Active/passive a central VIP for mgmt is usually setup, so you dont connect to the passive FW.

From what i see there is no VIP for mgmt in

Resolved! Panorama 10.0.5 - Scheduled Config Export - ssh custom port

Hi,

we try the export of the config of Panorama and our bothe Firewalls 3260 thru the "Scheduled Config Export".

It runs well with FTP and SCP port 22.

With a custom port ssh, the "Test SCP server connection" failed.

I found no future infos on https://

Resolved! Palo Alto PA-3220 replace Bluecoat Proxy

Hi Guys,

Does anyone tried to use PA-3220 model as proxy server? Currently the internet traffic of my company is using bluecoat proxy with pac file (config in windows proxy setting), and the proxy also inline with sourcefire for doing SSL interceptio

Resolved! Switch port configuration for management interface on HA pair

Are there any recomendations or requirements to configure a switch port for management interface for a PA firewall?

Should it be an access port or could it be a 802.1q port (trunk mode)?

Are there any recomendations to enable/disable/specify lldp/cdp/v

Resolved! Prisma SD-WAN application SLA setup?

Where can I know how to setup the application SLA condition?

I read some Prisma SD-WAN Administrator’s Guide, I seen there are lot of function to enable Path selection and monitoring based on the Link Quality, SLA.

But how can I set the SLA of the ap

Resolved! Can't advertise static route over ebgp

Hi all,

i'm not having much joy getting this working.

I have created a static route for a subnet which I am trying to advertise to an eBGP peer.

I then created a redistribution profile with only static enabled

I then added that profile under bgp Redist