Inbound decryption seems to changed preferred order

Without decryption server preferred order comes out as this.

And after enabling decryption it appears as 

Looks like PA is doing it. Is there a way to manually control this order on PA

No transmit/drop in capture

What are the reasons we don't see transmit or drop in capture and traffic log shows traffic is allowed to/from correct zones, and tcp as age-out in logs. Packets only show in receive/firewall stage. Alos checking flow basic, I do not see the packet a

Application and services in security policy rules

Hi I have a question,

Following rule,

Application allowed- DNS,SSL,WEB-Browsing

Service allowed - TCP port 22

I understand DNS, SSL and Web-browsing would be allowed on port 22, but my question is SSH  traffic  would be allowed by this rule as I am

how to get the VM image of palo alto for practice.

Please advise how can i get the VMware VM image to practice.

when login to the portal getting the below

Panorama-shared objects

I am just setting up a panorama with 25 managed firewalls.

How can I have shared objects that are only shared between few firewalls but not all? My perimneter firewalls have huge number of objects which I would not like sharing with other remote firew

Split Tunnel with Global Protect and cannot get to internet

Hello,

I have setup GP VPN and all works well. I can connect and everything works as needed.

The problem is when I check off No Direct Access to local Network the internet is not available and I can still access my local network?

We are using a PA-3200

Paloalto Support Potral issue

Hi,

I am facing an issue with when login support portal.

I have configured 2FA Methods to use Email, but it seems too slow to receive email.
The occurs page expired after I fill in the code.

I would like to change 2FA Methods to google auth,

Is there anyo

how does Support Portal 2FA cancel?

Get email authentication when logging in to the support site But I don't get an authentication mail. 

Is the account locked because of too many attempts?

Does anyone know how to change or cancel 2FA settings?

DUAL ISP and PFB with single or multiple Virtual Routers

Hello Palo Alto Community! I am reaching out because I am stuck and a bit confused about what I've seen online when it comes to configuring dual ISP and PFB (which that part I understand) but when configuring the Virtual Routers section. Some only cr