Blacklisting Workstations?

Sorry if this is a dumb question, I'm still a bit new to PA.

I've recently had a case where a few workstations cannot access anything beyond the local network. A trace shows that they can reach their default GW, but not the next hop, which is the PA.

ntlm exited 4 times must be manually recovered

In our system log of the PAN5250 with PAN OS 8.0.15 i see the following critical message : ntlm exited 4 times must be manually recovered. Does anyone has the same issue or knows how to handle this. I can't find how to manually recover this and where

TLS syslog to a cloud based SIEM

Running software version  8.1.10 on this PA firewall.

I have the TLS syslog server profile setup in Configuration type logs and that works (getting config logs).
Then I setup this log forwarder profile that has both TLS syslog and UDP syslog server pro

Question regarding Customer Advisory "Content Delivery Network Infrastructure Update"

There is a new Customer Advisory "Content Delivery Network Infrastructure Update".

https://live.paloaltonetworks.com/t5/Customer-Advisories/Content-Delivery-Network-Infrastructure-update/ta-p/307121

We use AppID "paloalto-updates" to allow download of

GP: "Matching Client Config Not Found" when trying to connect

Heya Gurus!

I'm running into an issue that I can't seem to figure out.  I helped a client migrate a firewall over from Checkpoint to PAN.  A few false starts and we got it going.  Now we are working through the 'b' list of items that needed to be figu

Panorama HA Config question

Hi All,

Quick question on my new deployment for Panorama. I have a HA pair with unique hostnames and IP addresses with firewall as an active passive pair. The migration steps state the following:

Do not combine the HA firewall pair in to a single temp

Google Play Store Broken When SSL Decrypted

As part of our setup, at an independent school, we decrypt the majority of traffic and set rules to bypass where needed. As part of this, we've struggled to get the Google Play Store to work with decryption turned on. I've used a test phone without d

vulnerability protection signature for CVE-2020-0601

is there any vulnerability protection signature for CVE-2020-0601 (https://www.symantec.com/security-center/vulnerabilities/writeup/111396)?

Best source to find if a exploit impacted an organization ?

Hello Gurus 

With the latest vulnerability of Microsoft and oracle, I would like to know the best sources where I can find if this vulnerability impacted any organization? I usually check exploit-db but looking for any sources/person/links to follow