Palo Alto - SSL ciphers that offer medium strength encryption

We used Nessus tool to run security scan on the PA-5020 & PA-3020 series & it identified with the following below medium vulnerability:

"The remote host supports the use of SSL ciphers that offer medium  strength encryption"

Please let me know, for an

Palo Alto - The server's X.509 certificate cannot be trusted

We used Nessus tool to run security scan on the PA-5020 & PA-3020 series & it identified with the following below medium vulnerability:

The server's X.509 certificate cannot be trusted.

Please let me know, for any fix to this vulnerability.

Problems with the support Portal

Hi Team,

I need to open a new case from the portal, however pressing the create case button gives me an error and does not allow me to even verify the cases that I have open.

Regards,

Traps Agent alert disconnected->unlicenses

Hi,

We just realised that our ESM shows "agnet service status changes": Disconnected->Unlicensed". But we have a current licenses. How can tshoot this issue?

Aruba clearpass user id issue with Palo Alto

We have ClearPass integrated to Palo Alto. ClearPass sends user-id to the firewall upon successful authentication. Customer is experiencing an issue where the laptop (on wireless) would fail to access Internet at re-authentication.

There is another

How to give only office 365 app with no url filtering linsense

Hi everyone how can I give only office 365 app to users and give no permission to access other web browsing without url filtering linsense, help.

9.0.9-h1 for Panorama?

I am looking to upgrade our VM Panorama devices from 9.0.6 to 9.0.9-h1 but whilst I can 9.0.9h1 via Panorama>Device Deployment>Software I cannot see it available under Panorama>Software. Does that mean that it is not available for my device?

GlobalProtect Pre-Logon setup uses multiple IP addresses

I have setup GlobalProtect with Pre-Logon configuration, but between the "pre-logon" status and "post-logon" status of the same computer I am getting 2 different IP addresses.  For example, during pre-logon I get 172.16.4.201, but as soon as a user l

GlobalProtect ARM fails to run

I'm attempting to run my FriendlyElectric Raspberry Pi as a VPN router so I'm running a fresh install of Ubuntu 18.04.4 LTS

I started off having to install the armhf architecture and core libs

Paloalto PAN OS7.1.6 to PA 3250 8.1.13 migration

Hi,

I would like to migrate one PA 4020 EOL device which is on PAN-OS 7.1.8 and I got one new PA 3250 with 8.1.13 PAN-OS. Can someone please suggest how I can do this migration?

I appreciate your time and help. 

Timeout when connecting to Azure

I seem to be having an issue where the microsoft_graph_secapi output nodes aren't succesfully connecting to Azure.

I don't know what I could have possibly configured wrongly to cause this.

PA-VM deployed in Bluvalt cloud (openstack)

Dears,

I'm new in paloalto firewall.

We deployed PA-VM in  our provider Bluvalt cloud (openstack) and we need to use vpn site to site tunnel with another provider.

 I will be grateful if anyone can help us to make the settings from the beginning.