PA-820 Time Reverts to 2000

I have PA 820s deployed at remote sites with IPSec tunnels configured on them. When a power outage happens, either through a requested shutdown or not, the time resets back to Jan 1, 2000 on some of them and the initial commit fails. This causes the

Security Policies in Firewall

How to troubleshoot when we get sessions end reasons: 

Tcp-rst-Server

Tcp-rst- client 

Tcp-fin 

n/a

Aged out 

I know what all these but I don't know how to troubleshoot the issue and don't know where to start  troubleshoot 

Can someone help on this. 

Using Rest API to delete an AWS Monitoring Definition in Panorama

I am trying to automate the addition/deletion of AWS Monitoring Definitions for the AWS Plug in for Panorama.  I am able to add Monitoring Definitions using the following in Postman:

https://{{panorama}}/api?key={{key}}&type=config&action=set&xpath

SSL Decryption - Forward Trust Certificate option not available

Hello

I try to configure the ssl decryption on my cluster of PA-220. I have an internal PKI based on Microsoft solution. On the first node, I'm able to generate the request, the csr has been validated by the PKI server and I'm able to export from the

Panorama - VMware Tools?

Is VMware Tools supported by Panorama or is it recomended to install via ESX?

Thx,
Jeff

Google Chrome is asking for credentials on some sites while GlobalProtect VPN is active.

Good morning,

one private client hired me to format his computer. After installing and logging into GlobalProtect VPN, his favorite browser Google Chome is asking for credentials on some websites like Whatsapp Web. When he turns off GlobalProtect the

GP Authentication issues with Symantec VIP

Newbie Question

Guys,

I want to apologize in advance.  I just haven't been able to find any information on this topic.  I have our first brand new PAN firewall and I'm configuring it for use in a remote datacenter where we rent space and we will connect via site-to-

OSPF route learning with Active/Active HA setup

I have an Palo Alto A/A HA configuration, each member with their own independent virtual router. The HA firewalls build an IPSEC tunnel to a branch Palo Alto firewall and have OSPF configured to advertise the HA firewall routes to the branch firewall

systemd-resolved support for GlobalProtect Linux

My system is using systemd-resolved to manage name resolution.

my /etc/resolv.conf is a symlink to /run/systemd/resolve/stub-resolv.conf

When I connect to GP, my systemd is not aware that new DNS server and search domains are available.

Is there a way

Qos profile max bandwidth setting does not match qos interface statistics.

Hello Everyone,

I have a question about qos and wana to confirm.

I creat a qos profile and set maximum bandwidth 0.2 Mbps, after then apply it to network Interface that I want to qos.

However, after finishing submit commit, I click the statistics of

certification

Hello Community

my name is Abdullah and i belong a poor family can palo alto team provide a free certification.