8.0.2 Management SLOW, SLOW, SLOW on PA500

Has anyone else noticed that the management functions through the web interface are incredibly slow with 8.0.2?  Committing even a simple change brought these timings:

- 1:10 just to get the progress bar beyond zero

- 3:42 to complete the commit.

Seems

Migration from Palo Alto Multivsys to single Vsys

Hi Team,

Is there a we can migrate a PA 5050 multivsys configuration from one appliance and migrate it to two different 3220 appliances. Where Each Vsys from single PA 5050 goes to different 3220 appliance. For instance (Vsys1-PA 5050) should converte

Migration from 5060 to 5260

Hi Team, 

Currently working on a PA migration 5060 to 5260. I tried to import the config in to the expedition tool, which  is exported from PA-5060 appliance. I found the below error on expedition.

I also tried to import it after converting to zip fil

Palo alto splunk syslog view

Hi Community,

While exporting syslog from palo alto splunk in default format, what is the default format for config logs.

Where I can see the default format. Next to hostname what is that value "1" where it comes from?

SSL Inbound // decrypt-unsuppot-pram

What can i do here..Is it something we have to fix on server side or firewall.

Not Working, Block sessions with unsupported cipher suites, Selected.

Protocols allowed min SSL3.0 to MAX

Working, with Block sessions with unsupported cipher suites, Un-s

Session Keep Alive packet size

 Good Afternoon Community!

I believe there is a minimum packet size for an application keep-alive packet for Palo Alto to register a session match. I am just having a hard time finding that documentation.

Does anyone know and could share or am I mist

Path Monitoring for Auto Fail over between 2 ISP but it is not working

I recently configured Path Monitoring for Auto Fail-over between 2 ISP but it is not working. Primary route is not removing from the routing table even when destination IP is unreachable

ISP-1: x.x.x.x

ISP-2: x.x.x.x

I have configured both interface on

Multiple MFA vendors at the same time

Good morning,

We are currently using Symantec VIP for MFA with our PA. Management would like to move to Okta and would like to know if both can be used at the same time? 

Thanks,

Steve

Block Dynamic Domain from Security Rulebase

Already the specified Malicious URL getting a block from URL Filtering and detected in Threat Prevention with action.

it’s a dynamic FQDN/IP that has to block from the security rule base too, but the does not want to add each IP to block as he receive