GlobalProtect Agent blocks DNS requests

I have case open with Palo but was wondering if anyone can verify and get same result as I. I have 0.0.0.0/0 route towards tunnel.I have Primary and Secondary DNS servers configured in GP Gateway (Network Services tab). When I perform nslookup from Windows command prompt then reply comes only if request is sent towards either Primary or Secondar...

Identify if the Palo Alto IDS/IPS has a signature for a specific vulnerability based on the CVE

We been working with Palo Alto to identify a strategy to help identify if the Palo Alto IDS/IPS has a signature for a specific vulnerability based on the CVE number. We should roughly be able to support this use case, but there will be some limitations:We can verify that a signature has been downloaded to the Panorama, but NOT if it is applied t...

Panorama attempting to connect to dummy-iot.services-edge.paloaltonetworks.com

Following an upgrade to PAN-OS 10.0.3, Panorama began sending out alerts every 5 minutes: opaque: gRPC connection to dummy-iot.services-edge.paloaltonetworks.com:443 is broken We do not have the IoT Subscription, nor can I find anywhere that this is configured. The error itself is due to the URL not resolving, as it appears to be a placeholder....

Management Plane high utlization

Hi guys, Im having a query regarding Packet buffer protection where after enabling it i can find that management plane cpu utilization reached from 7 to 80% im not sure what could cause it. So can some one refer me when does management plane reaches the high utilization and does enabling packet buffer protection cause this issue? Thanks

Looking for a proxy which supports SSL interception for forward traffic and Http/2 support

Multicast Access to External Stream

Looking for some info on getting multicast working through the Palo Alto. Current working with version 8.11 and previously accessed this iptv stream located externally via a tunnel. Now that hardware has changed, we need to find a way to access this external UDP video stream via the firewall. Went by the latest multicast article on the PA ntwks ...

userID agent not connecting

5220(9.0.11) firewall connectes normally to local DC running userid agent, but I see this for a remote DC which also has the agent installed. The same remote DC is connected successfully to 850(9.0.11) firewall on remote site. Not sure what the issue is here. 03-10 07:24:16.210 -0800 Error: pan_ssl_conn_open(pan_ssl_utils.c:843): Error: Failed...

Config Audit

Hi Everyone - I wanted to pose this question to the folks out there that may be feeling the same as I do about the way the config audit feature works. It is supposed to be a simple way to do a diff on config changes/deletes. I have found that palo seems to insert simicolons and braces throwing off the reporting and making it less than optimal fo...

combine more than two port for internet connections

Hi I wish to understand how combining more than two ports for internet connections works. I have configure four ports for internet connections with deferent speed. when I perform a seed test. I think, some result base one companying all port seed - fast speed result- but some times base on one port speed - slow speed result . so I am not sure ...

MineMeld - Memory Leak or Redis needing configured?

Build: Followed the Azure 16.04 LTM instructions Problem: Every 3-4 days after increasing to 4 CPU's and 16 GB Memory the memory seems to creep up to the point of borking the instance. WorkAround: Every 3 days restart the engine. Context: Currently have 1 source producing over 800K over time steady after aging out happens. 8 Miners 3 Procs...