General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

PA500 boot error with message "unable to connect to Sysd" and NIC in dataplane does not worked.

The firwall PA500 had a poweroff and boot,and after reboot the PA500 get a error with "Error: sysd_construct_sync_importer(sysd_sync.c:328): sysd_sync_register() failed: (146) Unknown error codeError: unable to connect to Sysd"When the device boot finished,the NIC port on dataplane did not power up and did not work.We could connect PA500 using c...

songjixian_0-1633214175896.png
songjixian_1-1633214215318.png
songjixian_2-1633214453435.png

Resolved! One session is utilizing 5-12% of CPU of my 5220 firewall

One session is utilizing 5-12% of CPU of my 5220 firewall. Session ID: 2155872259 show session id 2155872259 Session 2155872259Bad Key: c2s: 'c2s'Bad Key: s2c: 's2c'index(local): : 8388611I am not able to check the session information. Getting bad Key error. This session causing me extra 5-12 CPU utilazation. I tried clear the session but still...

NijithPN by • L1 Bithead
  • 5900 Views
  • 3 replies
  • 0 Likes

X-VPN not getting decrypted

Hello, We would like to block the application X-VPN (used on apple iOS system as a VPN app). Using PAN-OS 8.0.1The firewall sees the traffic as either SSL, web-browsing or google base traffic and doesn’t appear to be decrypting it.The session ID says the URL is for bing.com in the session but the destination is 104.156.232.205.vultr.com which is...

1.png
2.png
Farzana by • L4 Transporter
  • 14004 Views
  • 7 replies
  • 0 Likes

Resolved! Failed to download dynamic updates

Hello, I haven't been able to download any dynamic updates to our Palo VM-100 for a little over an hour. The message Failed to download file appears and in the system log I see connection to update server closed.For example, I also tried to download an older version of Global Protect, but this download also fails. Interestingly, for example, cur...

Inline ML always shows "unknown"

I'm trying to figure out if the "Inline ML" feature is working. A quick search of my logs for "dynamic-classification-verdict neq unknown" returns zero results. I found a support article with a sample file, but it says I have to host it on my own webserver. Does anyone have another way I can test it?

Maxstr by • L1 Bithead
  • 2316 Views
  • 1 replies
  • 0 Likes

Block from old Browser Version

Hi Community, I work to create a role that should block old browser versions. But I have not found out this special point how you can say from a certain version that these are blocked and only allowed from the safe status. Is there a solution? Many thanks for your help

holmegan by • L0 Member
  • 4983 Views
  • 1 replies
  • 0 Likes

Resolved! Wildfire performance lag

Hi All, Can you advise on any current known issues or bugs pertaining to wildfire performance lag?We've encountered an issue where the Wildfire instance seems to be lagging by approx 2.5-3 hours - file submissions from 11:46 till 14:36 still in "pending" state. Cheers,Robyn

RobynLee by • L0 Member
  • 3246 Views
  • 2 replies
  • 0 Likes

decryption error - response page not displaying to user

HiWe have set a new decryption profile that is hardened to a new 10.0.6 PA 3250.Most things seem ok however when we go to the guardian website we just get a this site cant be reached page. It would be great if the user got a response page saying decryption error. Is there a way to get this? There could be others (lots of General TLS protocol er...

krisfraser_0-1632918966451.png
krisfraser_1-1632919018039.png
krisfraser_2-1632919039675.png
krisfraser_3-1632919374577.png

Regarding logrcvr during commit in PA box.

PAN os 10.1.0 has been installed and deployed in HA(Active/Passive), while making commit after new policy creation or modifying existing policy, I got error as "client logrcvr phase 1 failure, configuration is invalid".

  • 24476 Posts
  • 125 Subscriptions
Top Solution Authors
Top Liked Authors
Labels