Blocking vs. logging throughput

If I have a security policy applied to all my zones which includes profiles for everything (AV, spyware, vulnerability protection, etc.) but the actions are all just logging or alerting and not blocking, would that affect my throughput?  I was wonder

Threat / AV signatures after OS EOL.

Will AV /  Threat Signatures still up date on 8.0 after EOL?

I only found out it was going EOL when I logged into another of our clusters with 8.1 which told me on the MOTD..

The MOTD on the 8.0 has no such message.

I have had  look through the "Palo

Using the PAN as a reverse proxy to protect web servers

Hello All,

So I have a scenario I'd like to see what others have done. Keep in mind we already do IP whitlisting and have all our defenses up, i.e. Zone protection, Anti-virus, anti-spyware, vul protection, etc. 

Scenario:

External users connecting to

Miner for ipv4 and v6 lists

New with creating custom miners/prototypes/etc for pulling addresses.  I'm trying to get an EDL consumable list from the below page for lookback.io.  I assume the main part I'm missing is which prototype, processor, and output to choose, as well as t

What is the deal with VM Panorama mode maximum log storage space?

Hello,

Documentation states that VM Panorama mode can support up to 24TB of log storage on a single virtual appliance.

Each logging disk has 2TB of storage capacity for a total maximum of 24TB on a single virtual appliance

So we add 12 virtual disks wit

PA session end reason is decrypt error -

In PA i  saw this behavior for session end reason is decrypt error and traffic is working fine.
I check with users where session end reason is decrypt error they told me they have no issues.
we have ssl decryption enabled and PA is running 8.1.9
IS th

VPN S2S and Description ssl in Wires mode

Hello, I have a couple of doubts and I would like you to help me about it. 1.- Is it possible to perform an Ipsec VPN when the firewall is in V-Wires mode? Only having an IP in the administration interface? 2.- Is it possible to perform SSL decryp...

Updates palo alto network website and ssl decryption

I am going to implement ssl decryption for some subnets

where we have management subnet of Palo Alto networks.

Need to know if PA website updates.paloaltonetworks.com works when SSL decryption is enabled?

Do I need to check - verify server identity for

GlobalProtect Dialog Empty

This started after adding a second VPN to GlobalProtect, but not immediately, perhaps a day or 2 after. Using Windows 7 and GlobalProtect 4.1.8. When I click the GlobalProtect icon in the System Tray, It shows up in the TaskBar, but no window shows.

Internet disconnection when switching from wired to wireless

We have newly implemented PaloAlto in our network. Internet access provided for the user using the AD username. Using User-ID Agent in Active directory. When a user is logged in with wired connection and switched to wireless the internet is getting d

session end reason: auth-policy-redirect

Hello,

I don't find this session end reason in documentation, someone know  what does it means? thank you in advance

Regards

Marivi