General Topics

Inline ML always shows "unknown"

I'm trying to figure out if the "Inline ML" feature is working. A quick search of my logs for "dynamic-classification-verdict neq unknown" returns zero results. I found a support article with a sample file, but it says I have to host it on my own webserver. Does anyone have another way I can test it?

Review Policy (in Application and Threats last update) is performed in Control Plane or in Data Plane?

Review Policy (available in Application and Threats last update) is an operation that is performed in Control Plane or in Data Plane?

Block from old Browser Version

Hi Community, I work to create a role that should block old browser versions. But I have not found out this special point how you can say from a certain version that these are blocked and only allowed from the safe status. Is there a solution? Many thanks for your help

Resolved! DNS security license

Hello allI need to know if DNS Securtity license is included in threat prevention subscription or notThanks in advanced

Palo Alto threat Protection License Expire

if threat protection license expire .Will it impact on traffic policy ,means does traffic stop .what is the possible behavior or firewall will be when license expires .

Resolved! Wildfire performance lag

Hi All, Can you advise on any current known issues or bugs pertaining to wildfire performance lag?We've encountered an issue where the Wildfire instance seems to be lagging by approx 2.5-3 hours - file submissions from 11:46 till 14:36 still in "pending" state. Cheers,Robyn

decryption error - response page not displaying to user

HiWe have set a new decryption profile that is hardened to a new 10.0.6 PA 3250.Most things seem ok however when we go to the guardian website we just get a this site cant be reached page. It would be great if the user got a response page saying decryption error. Is there a way to get this? There could be others (lots of General TLS protocol er...

Regarding logrcvr during commit in PA box.

PAN os 10.1.0 has been installed and deployed in HA(Active/Passive), while making commit after new policy creation or modifying existing policy, I got error as "client logrcvr phase 1 failure, configuration is invalid".

Resolved! PANOS 9.1.11 able to support PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16?

Would like to know whether Panorama software PANOS 9.1.11 will be able to support the PANOS 9.0.13 (PA-5220), 8.1.19 (PA-5020) and 8.1.16? Is it PANOS 9.1.11 is the stable version?

Log space

Hi - I know there are plenty of discussion about log size - but I don't think anything answers my query.We installed out Palo Altos (2x 4050s) at the weekend. They sit between our internal datacentres and the rest of the customers network - so they are not internet facing. We log traffic (at start and end) and threat logs (alert on AV/Spy/Vulner...

Resolved! A customer has a question about the pa-5220 they are using.

1. Customers want to use nat. How many ips can be assigned to snat and dnat respectively?https://www.paloaltonetworks.com/products/product-comparison?chosen=pa-5220,pa-3260According to the address above, pa-5220 can use up to 6000 nat rules, I wonder if this is correct.2. Customers want to use snat and dnat in the same band. At this time, I want...

Signature Policy in Anti Spyware Profile

What does Signature policy in Anti Spyware do, and what does "Default" in Action do.

How do i get a new employee added to the contract

How do i get a new employee added to the contract.Telstra CSP = 158687Telstra NSP = 178860

No packet capture files are generated on pa-3060 that customers are using.

Hello.I have been contacted by a customer that there is a problem with packet capture.I know that executing a packet capture command triggers packet capture, and generating a pcap file containing captured packets is generated when the traffic you want to check is generated.However, looking at the attached screenshot, the customer executed the pa...

Resolved! PAN-OS GP SSL Cipher Selection

PAN-OS 8.1 seems to lack the capability to perform fine-grained configuration of cipher suite selection and prioritization for GlobalProtect VPN functions. I ran a fairly detailed SSL functionality assessment on a configured TLS v1.2-only GP gateway and found that RSA encryption-based ciphers are selected by default by all simulated clients. Thi...

Discussions

Inline ML always shows "unknown"

Review Policy (in Application and Threats last update) is performed in Control Plane or in Data Plane?