General Topics

Log Forwarding using SMTP

Hi,

Can anyone suggest on how to customize the email format of Palo Alto when log forwarding was configured and logs were sent using SMTP?

DH - VPN

Hi ,

How can I allow multiple Diffie-Hellman (DH) group in IKE  & IPSec profile while creating a VPN 

"export to CSV" - limit

What is the maximum limit on the number of lines to return? can it be increased?

The user Id tab under not able to detect AD Group but Group Incluse List shows the Group

I am unable to find the User group under user column in the Firewall Policy Tab and i see that the User Id agents are connected to the Firewall but when i do the same Search under the Group Inclusion List i see the Group in that Tab. I was wondering

Knowledge sharing: High Data Plane CPU because of DDOS or overutilization (access to Palo Alto Auto Assistant may help)

I have seen for example on a small firewall when the customer enables SSL decryption that the counters for work groups "ecdhe_key_gen", "flow_host " etc. jump. This may show that the firewall can't handle the ssl decryption or that there is an SSL DD

behavior in multi-vsys with shared gateway and DNAT policies

Dear community,

We have a firewall with multi-vsys and the following scenario:

 1 shared gateway and 1 public IP on external zone
 1 virtual system and 1 private IP on internal zone

We configured DNAT to allow access to private IP from Internet followi

HA Active/Passive with Preemption

2 firewalls configured with HA active/passive, And enabled preempt on both of firewalls

Everythings find, can synchronize configuration and session

firewall-A is active-firewall with priority 100

firewall-B is passive-firewall with priority 120

HA timer

Difference between last 24 hour and last calendar date option in reports

Hi All,

What is the difference between last 24 hours and last calendar day time frame option that is being used in custom report settings. 

Also last 24 hours time frame means past 24 hours data will be added to the report the minute report is run.

B

IKE SA negotiation is started as initiator, non-rekey

Hello :),

I have a problem with VPN from PA-220 to Azure. The logs show this information : "IKEv2 IKE SA negotiation is started as initiator, non-rekey. Initiated SA " 

Every change I made it always is this same error. Is there any way to resolve this

System Logs

Hi,

Do we have any list of critical and high severity system logs? Like what are the examples of hardware failures, serious issues etc...

user-id-agent-sequence is invalid.

Hi Team,

I'm seeing configuration invalid when I remove user-id agent from palo alto firewall and not able to commit.

PA-220 PANOS version 8.0.3.  Same model firewall I have removed I can able to commit.

Only in this firewall, I'm seeing this issue.