Prisma Access per transaction latency statistics

PA Migration

Hi ; One of our customer is Migrating all the vlans which are currently on PA 3020 ( Acting as L3) to another firewall in their DC PA 3060 .There are around 15 vlans which are directly connected networks on PA 3020 . So we will be extending those vlans to DC and make the subinterfaces on DC PA 3060 / Shut down the subinterfaces on PA 3020 and m...

Video conf webex

Hello , we have got one issue . While we dial from webex internal to outside webex number : sometimes the webex connection created ; sometimes black screen and sometimes no connection created. Got below error on webex The far end system does not support the requested channel type . The security policy is 10.1.1.1 to any any port The NAT is H...

FTP and rtp-base session end reason resources-unavailable after upgrade PANOS from 8.1.7 to 9.0.5

Hi, We have recently upgraded our 5250 from PANOS 8.1.7 to 9.0.5. And FTP started to have slowed down. After checking traffic log, there were some FTP session ends with resources-unavailable. It's about every 10 sessions will have one with resources-unavailable. Also, there were some rtp-base sessions have the same session end reason. It's impac...

Global Protect V 5.0.4 Auto disconnect after Connected few second in Windows Server 2019 Data Center

Hi Expert,Pls, I have a problem when installed the GP in window server 2019 Data center platform ( AWS). GP auto disconnect after connected successfully a few seconds. Hope hear any suggest from you to solve this problem. Best regards,Khai

PA syslog app id - problems

Hi so 5220 - 9.0.5 I have a syslog client and syslog server.the path goes through my PA.I have a rule basically says any internal ip is allowed to the syslog server if the app it syslog that doesn't work, the packets are too short for the PA to distinguish them .. sigh so add in unknown - udp . now they go through. next problem tcp syslog on po...

GlobalProtect For Linux

Hi, I want to add linux globalprotect agent on my portal for customers. How can I do that? Ubuntu and centos for both. Thanks for help.

Palo Alto 3050 high DP and MP planes CPU utilization

Hello Folks, I have upgraded my palo alto HA cluster (model 3050) to version 9.0.3-h3. All of sudden i have started facing high dp as well as mp planes cpu utilization. There is no much traffic on the firewall. Connection table utilization is also around 20% in peak time. Wanted to check if it is anyone has come acrossed such issue..? Thanks!

Configuring external connection through a switch

Hi,Initial config query! We currently have 2 leased lines going into a managed switch for failover capabilities with then a single cable going into our existing firewall (Zywall).This weekend we would like to switch out the existing firewall with our new PA-850 but retain the managed failover switch within the dataflow (this will be replaced in ...

SSL decryption( Some traffic is not decrypted)

Dear All, I have applied SSL forward decryption in my Paloalto, then i observed some traffic are decrypted and some traffic not decrypt.Example:- I have applied the decryption in social-networking (Facebook traffic is decrypted but Snapchat traffic is not decrypted,however, both are falling under the social-networking category.) Why it's strange...