decrypt-cert-validation while performing windows update

Hey Guys ... I am doing a normal Windows Update and i am getting error.

While analysing the application type is ms-update and reason for session end is decrypt-cert-validation.

Appreciate if you guys can support.

Debugging packet flow.

Hi there,

We have just moved from a Juniper SSG-550 with around 700 policies to a PaloAlto 3050.

Naturally this has thrown up a few issues!

Can anyone explain how to do the equivalent of a Juniper “debug flow basic” on the PaloAlto?

On the Juni

Blocking vs. logging throughput

If I have a security policy applied to all my zones which includes profiles for everything (AV, spyware, vulnerability protection, etc.) but the actions are all just logging or alerting and not blocking, would that affect my throughput?  I was wonder

Threat / AV signatures after OS EOL.

Will AV /  Threat Signatures still up date on 8.0 after EOL?

I only found out it was going EOL when I logged into another of our clusters with 8.1 which told me on the MOTD..

The MOTD on the 8.0 has no such message.

I have had  look through the "Palo

Using the PAN as a reverse proxy to protect web servers

Hello All,

So I have a scenario I'd like to see what others have done. Keep in mind we already do IP whitlisting and have all our defenses up, i.e. Zone protection, Anti-virus, anti-spyware, vul protection, etc. 

Scenario:

External users connecting to

Miner for ipv4 and v6 lists

New with creating custom miners/prototypes/etc for pulling addresses.  I'm trying to get an EDL consumable list from the below page for lookback.io.  I assume the main part I'm missing is which prototype, processor, and output to choose, as well as t

PA session end reason is decrypt error -

In PA i  saw this behavior for session end reason is decrypt error and traffic is working fine.
I check with users where session end reason is decrypt error they told me they have no issues.
we have ssl decryption enabled and PA is running 8.1.9
IS th

VPN S2S and Description ssl in Wires mode

Hello, I have a couple of doubts and I would like you to help me about it. 1.- Is it possible to perform an Ipsec VPN when the firewall is in V-Wires mode? Only having an IP in the administration interface? 2.- Is it possible to perform SSL decryp...

Updates palo alto network website and ssl decryption

I am going to implement ssl decryption for some subnets

where we have management subnet of Palo Alto networks.

Need to know if PA website updates.paloaltonetworks.com works when SSL decryption is enabled?

Do I need to check - verify server identity for

GlobalProtect Dialog Empty

This started after adding a second VPN to GlobalProtect, but not immediately, perhaps a day or 2 after. Using Windows 7 and GlobalProtect 4.1.8. When I click the GlobalProtect icon in the System Tray, It shows up in the TaskBar, but no window shows.