Palo Alto 3050 high DP and MP planes CPU utilization

Hello Folks, I have upgraded my palo alto HA cluster (model 3050) to version 9.0.3-h3. All of sudden i have started facing high dp as well as mp planes cpu utilization. There is no much traffic on the firewall. Connection table utilization is also around 20% in peak time. Wanted to check if it is anyone has come acrossed such issue..? Thanks!

Configuring external connection through a switch

Hi,Initial config query! We currently have 2 leased lines going into a managed switch for failover capabilities with then a single cable going into our existing firewall (Zywall).This weekend we would like to switch out the existing firewall with our new PA-850 but retain the managed failover switch within the dataflow (this will be replaced in ...

SSL decryption( Some traffic is not decrypted)

Dear All, I have applied SSL forward decryption in my Paloalto, then i observed some traffic are decrypted and some traffic not decrypt.Example:- I have applied the decryption in social-networking (Facebook traffic is decrypted but Snapchat traffic is not decrypted,however, both are falling under the social-networking category.) Why it's strange...

Diplay file in disk folders

Dears,when I apply following commandshow system disk-spacemany folders displayed. can you help me to display all files in this folders (/opt/pancfg,/opt/panrepo, /dev/shm, and /opt/panlogs) ?Filesystem Size Used Avail Use% Mounted on/dev/sda3 3.8G 1.1G 2.5G 31% //dev/sda5 7.6G 2.1G 5.1G 29% /...

Wildfire False positivs ... more than usual

Hi community In our environments we start getting more and more fals positivs from wildfire where documents (mainly docx and xlsx) are flaged as malicious without any reason, or at least a reason without details in the WF report. I wonder if you see the same over the past about 7 days?

User dropped when uses GlobalProtect

Hello. I have an issue when users use GlobalProtect to access internal resources (my policy is restricted by username).PA Release: 8.1.11GlobalProtect: 4.1.12-3 Initialy they access without any problem the whole set of resources and we see the user is identified by the User-ID. -----------------admin@PA1(active)> show user ip-user-mapping all...

OSPF BPA PARAMETERS

Hi Everyone, We r using OSPF over IPsec tunnel.We have two tunnels and failover dynamiclly.But when we r shutdown one tunnel there r many pinng loss(10 ping loss).We want to minimnize this value.Did any one do that before? Which value we should use for this config?

Search EDLs

Is there a way to search my current EDLs for an IP?

is there a pan ansible module for globalprotect gateway config , client config , split tunnel rules

bulk export of security zones on Panorama

Hello, I am trying to get a list of all the security zones configured on all the firewalls from Panorama. Is this possible? whats the most efficient way of achieving this? I have over 50 devices and exporting security zones from each one is tedious. Looking for a way to bulk export from panorama.

Using Secure LDAP profiles

In March 2020 Microsoft will be releasing a Security Update which will disable the use of LDAP connections (cleartext over port 389) to/from Windows Servers - only LDAP Secure connections (default port 636) will be accepted by Windows Servers after the Microsoft Security Update has been applied. I assume we have to change PAN firewalls LDAP serv...