LACP port is Flapping

LACP configure between PA and cisco switch 

Active and Active mode and transmission rate: slow

======================================

LACP System log::::LACP interface ethernet1/19 moved out of AE-group ae2. Selection state Unselected(Link down)

l2ctrld

Failed to install licenses. Auth Code activation is not allowed from Panorama

Device had been used with Panorama and now removed. Not able to retrieve the license to device now. Has anyone faced this issue before and is there any solutions?

Problems with GlobalProtect when not tunneling the Windows Store and Kindle applications

Hi,

I found this thread in General Topic (https://live.paloaltonetworks.com/t5/General-Topics/Unable-to-access-Windows-Store-Windows-10-GP-3-0-2/td-p/109438), and I have the same problem in my infraestructure; but no only with Windows Store, also wit

File Blocking Type.

Hi team,

I want to block .pst .dat .csr files.

I know the PA FW works on file types rather than file extension, but i want to know .pst and .dat and .csr are which file types ?

Blocking all files upload

Hi, 

Anyone has ever figured out how to block any inside hosts to upload any kind of file outside, but still allowing web browsing? The file blocking option support only specific type of files... and the APP-ID database doesn't have any king of basic

Two GP users have a client that is looping fast (prior to connecting)

Hello all,

We have two users across the pond that have an issue with their client attempting to start and then repeatedly starting multiple instances (task bar will show several GP icons as they come and go).

We did a deep-clean, reinstalled fresh, di

Access rule is being used even though the destination server is not mentioned in the rule.

Under traffic logs we are seeing communication is being allowed through an access rule which does not have a match for destination server. There is  security profile attached to the rule. Can someone please explain this behavior of PA.

Fan Alarm

Hello,

I have an issue with PA-5220 FAN  the LED indicator is red.

when I check the system environmental logs below is the result:-

Do I need to change the FAN or any troubleshooting steps for this?

Looks like eu.wildfire.paloaltonetworks.com has expired today

Getting alerts for eu.wildfire.paloaltonetworks.com having an expired SSL certificate

Looks like it is a wildcard for *.wildfire.paloaltonetworks.com from Godaddy, can someone in support replace it?

GlobalProtect with machine cert

Hi,

I'm having a challenge with GlobalProtect when trying to do ldap authentication with a machine cert (from internal MS pki).  I've tried both the computer and workstation authentication template, but neither worked.  GlobalProtect states certificat