Vulnerability wrong action Palo

Hi,

We are having a weird issue in Palo. We have a FTP server and we can not access because Palo detects this vulnerability: 

Name: SSH User Authentication Brute Force Attempt

Unique Threat ID: 40015

The Palo action is "alert" for this vulnerability but

Encryption mode between 6.0 and 9.1

My company are going to migrate upgrade one firewall from 6.0 to 10.1.

And I found below KB points out the supported payload options above and below PANOS 7.0.

Several IKE/IPSec profiles are using aes128 for ESP encryption, is it aes128 equal to aes-12

Spare-Device / OSS appears as normal Device with expired licence in CSP

Dear all,

I tried to register a device as spare via "Assets -> Spare" in the CSP, but instead of appering as Spare it is now listed under "Assets -> Devices" with an expired licence. I tried to open a support case via "Get Help", but because the devi

CTD usage and commit and update errors

VM-300, 10.0.8-h4 on KVM.

At one point issue with commit showed up:

Error: Error reading signature DFA data
failed to handle CONFIG_UPDATE_START

Also updates for Wildfire & Apps/Threats were not being installed. HA sync started to fail.

It was concluded t

Does Palo Alto support URL rewrite option ?

I have a query is When any user (OUTSIDE/INSIDE) accessing the URL or application like JIRA and CONFLUENCE which is hosted on the AWS server on the internet. that user's traffic hit into the ON- Premises data center instead of the internet and should

How to find double wrapped encryption over the SSL encryption C2 traffic

How to find double wrapped encryption over the SSL encryption C2 traffic within Office365 and GMail traffic

ESXi deployment question for Palo -VM series (L3 Mode)

I'm having trouble interpreting this link for deployment scenarios of the vm series Palo Firewalls.  Looking for clarification...

https://docs.paloaltonetworks.com/vm-series/10-1/vm-series-deployment/set-up-a-vm-series-firewall-on-an-esxi-server/suppo

Security Advice on SSH & SSL/TLS week ciphers

Hi Team,

I have few queries to be addressed.

We have changed the SSL/TLS version using CLI to TLS 1.2 but when we run the scan we can see TLS 1.1 is also running at the back-end. We need to check which SSL/TLS version is running using CLI of the Fire

Restoring Configuration Between Platforms?

Is it possible to restore a backup configuration from say a PA5000 series to a PA3000 series?  I know there are obviously interface differences between the platforms, and I couldn't find any recent documentation explaining if this is possible.

Than