TCP fast open and Palo Alto

as far as I could test there is no way to make TCP fast open work through a Palo Alto fw (at least, since  9.1 which seemed to work. It tried 10.2 and 11.2 and all my tests fail there).

Whenever a client sends a SYN packet with data, it is transmitte

10.0.10 code bug? LDAP auth server is up !!!

Since upgrading to 10.0.10, we've been getting system medium severity messages on our active firewalls that "LDAP auth server xxxx.xxx.xxx is up !!!".  We never receive a down message though.  We're not experiencing any issues with LDAP which makes m

Client routed requesting last config in the middle of a commit/validate

i am getting following error while committing config to vm-50

Client routed requesting last config in the middle of a commit/validate. Aborting current commit/validate.
Commit failed

Whatsapp traffic cannot recognize in PA for iPhone user.

Recently iPhone users only facing in WhatsApp "connecting" message, User could not send a message and make a call 

on corporate wireless network But, working in mobile network.
It was working before, day by day users facing this issue is increasing.

SysLog setup not working

Hi,

I am using PA-2050, with PAN OS 4.1.3.

From few days I am trying to configure the syslog to be sent to a central logging system. I followed every possible documentation, but I am not getting any syslogs coming to the syslog server.  I tried on sys

GlobalProtect Split DNS configuration

I'm looking to configure split tunneling and DNS in the following way:

If the DNS request is from a defined list, send the query to the tunnel DNS servers, if not, send through local adapter DNS. If the resulting reply contains an IP in the defined

Palo alto GUI is crashing on chrome browser 125.0.6422.0

I am experiencing an issue where palo alto GUI is crashing on chrome version 125.0.6422.0 when you click on monitoring . This issue noticed in panorama and NGFW with different versions.other chrome version it works fine

Application Command Center (ACC) - Source Regions Map not working

Hello everyone,

not sure about this, but my Source Regions map in ACC is not working, not showing up anything, no colours:

When I over over the countries it will just be shown in orange, but I can't click or do anything. Also all countries a

Need to Export last 90 days logs

Hi Friends,

We have a customer who wants to Export Last 90 days traffic logs from the firewall for Audit Purpose.

We have tried to generate them via Custom Managed Reports but no luck and more over we came to know that there is some logs exporting

Pan-OS end of life list

I am looking to upgrade the software on our firewall to version 10.2.9-h1. I know it has and end of life scheduled for August of 2025. Is that the same end of life from version 10.2.0 through 10.2.9-h1 or does each iteration have its own end of life?

Passive DNS Feature

hi,

Please give me suggestion how to apply " Passive DNS Feature " in PAN-OS 10.0.X version because got link in that it is not suggested to apply this feature on PAN os 10.0.x. please find below link and do needful.

https://knowledgebase.paloaltonetwo

AWS Tunnels Down when We make a Failover

Hello everyone,

I have observed that when a failover occurs on an active/passive cluster the IPSEC tunnels to AWS all go down and take a time to recover.

I have verified that the traffic goes down and does not communicate for a time of about 5-10 min