IPSEC Phase-1 fails as initiator but not as responder

Hello support community,
I'm using a PAN 3020 A/P cluster on the perimeter running 6.0.9.  At all of my remote sites I have a cisco ASA that uses IPSEC tunnels to connect back to the main network.  The IPSEC tunnel configuration (IKE phase 1, IKE phas

Config Backups Explained

Is a KB article out there that explains what each type of config export is and what is included? Looking through our Palo Altos I can see these 6 different config exports...

Named Configuration Snapshot

Candidate Configuration

Configuration Version

Devic

Chrome Plugin Warning

Does the Web GUI use flash or another plugin? I'm able to use it without it enable, but I receive a warning.

User agent recommended placement

What is the recommended Windows machine to run the user agent for version 6.

Our AD servers are at an offsite data center (5 miles away) and we have limited physical access to systems installed at datacenter.  If agents are installed at data center th

Antivirus Decoder Action

I feel silly asking this - wouldn't you want a deny on any decoder where a virus is detected rather than allowing the traffic and just throwing an alert?