Client ip pool grayed out

Hi,

Why Client IP Pool in gateway level is grayed out ??? 

OpenSSL SSLv2 Man-in-the-Middle Vulnerability under Top threats in Daily reports

I consistently get OpenSSL SSLv2 Man-in-the-Middle Vulnerability under Top Threats in Daily Reports.

What does this mean? am I getting attacked? is it reporting a vulnerability in devices? 

At what level should I be concerned with this?

Wrong HIP match

Dear All,

issue:

I have the firewall 5220 with PAN-OS 10.0.3 and I am facing an below issue:-

As GlobalProtect 5.2.6 is released with support for OPSWAT v4 only while OPSWAT v3 is discontinued starting from 5.2.6, I tried to test it on a few machines.

Prevent OSPF routing loops - Area 0

Hello,

We have a PA5050 with a couple of VRs.  

VR1 is the main VR with interfaces into the main customer networks, internet access and a 3rd party link

VR2 is for GlobalProtect clients and a separate internet link for the GlobalProtect Portals/Gateway

GlobalProtect: Existing user session..?

Hi all..  I'm sure this will be a simple question to answer, but I can't find any explanation. In the following snip from our GlobalProtect traffic log on a PA200:

Understand App_overrride

Hi,

We did a change from another vendor to PA. We realise that backups (vmware) were transferring very slow. So we created a app_override in order to avoid L7 in this VMware traffic. After that the spped for backpus got better.

So i have several qesti

Google Earth (Pro) and SSL Decrypt

Anybody figured out a the magic combo to get Google Earth (Pro) not to warn on startup with SSL Decrypt?  Before you ask "yes" SSL decrypt is working no errors or warnings in browsers (i.e. CA's in trust store) and yes I thought about the ICA issue a

Host with sinkhole action, what to do ?

Hello Bro,

              We have subscribed to the Palo alto DNS-Security feature and we have it applied now.

after few days, I have a dynamic object now with many host has been sinkholed for contacting a malicious domains.

Many Domains contacted, what

Decrypt-error with Inbound Decryption DHE or ECDHE on 8.1.3

Greetings all,

I feel like I'm probably missing something simple here, but I'm running into a decrypt-error issue on 8.1.3 in regards to a server that is negotiating DHE or ECDHE ciphers with the client.  On Chrome I get:

ERR_SSL_VERSION_OR_CIPHER_MI

LED's on startup

Recently migrate to a pair of 3200 series firewalls. Everything was fine and dandy until we powered them down to migrate to the correct rack. Once we powered them up, one came up fine, but the other has a green power light and nothing else. the fans

Error when I try to add the SAML Identiti Provider for Okta

Upload SAML IdP Failed. No IDPSSODescriptor node found. Any ideas?  Here's the file I'm trying to import

<md:EntityDescriptor entityID="http://www.okta.com/exk.....">
<md:IDPSSODescriptor WantAuthnRequestsSigned="false" protocolSupportEnumeration="urn