Next Hop in default route using DHCP Comcast modem

Hello Group,

I am setting up a PA-200 in my SOHO with comcast as my ISP.  I have comcast for my isp and am using DHCP to optain my IP address.  My question is this.  Per the setup guide, if I check DHCP under the IPV4 tab, and check, Automatically cr

SD-WAN OSPF

Hello Team,

I just wanted to know that does PA SD-WAN supports OSPF ??

Or it only supports BGP.

My use case is as below  Branch and a Hub to SDWAN

I have Internet links and Orange MPLS links and I have OSPF on OBS router and on the firewall 

After confi

URL Block / Continue on SSL - doesn't continue, page just refreshes.

I have a "continue" policy set on newly registered domains category.  If I visit a site with https I see the continue page but upon clicking continue the block page just refreshes (the guid in the address bar changes).  

If I visit the site without S

Apps/Threat out of Sync on Passive Panorama.

On one set of panoramas I noticed that the Apps/Threats are out of sync. The passive device downloaded, but did not install the update like the active device did.

The active device is set to sync with peer during the scheduled update.

The trouble is t

AE interface showing higher bandwidth than physical interface

The physical link in the firewall shows lower bandwidth as compared to the aggregate link on the same. Referred the SNMP logs which capture the same, please refer to the screenshots attached and let me know if this an expected behavior or not?

File blocking

Dears,

I am not able to block msi file via file blocking profile.

I have created a file blocking profile to block msi and different types of file extensions to block by the policy.

Then I tried to open exe file in the chrome browser which is working fin

user-id server monitoring error: NT code 0x800705af

Dear community,

I´m trying to add a new AD server to server monitor list in order to retrieve user-ip mappings and get the following error:

" WMIC message from server XXXXXXX: NTSTATUS: NT code 0x800705af - NT code 0x800705af "

Does anyone have any id

Live Community members - we want your feedback!

While we may operate the community from day-to-day, the Live Community is really YOUR community. Sure, we may have ideas about what might be helpful or interesting but since the community is yours and exists to help you, we ALWAYS welcome your ideas,

Lot of non-syn-tcp

Hi Experts,

we have a lot (I mean a LOT :-)) of non-syn-tcp traffic on our PA5220 cluster. The PA is in an enterprise company. 

Are we sure that the non-syn-tcp means that there is an asymmetric flow? Let me give you an example:

1) Host A sends a SYN