PA syslog app id - problems

Hi so 5220 - 9.0.5 I have a syslog client and syslog server.the path goes through my PA.I have a rule basically says any internal ip is allowed to the syslog server if the app it syslog that doesn't work, the packets are too short for the PA to distinguish them .. sigh so add in unknown - udp . now they go through. next problem tcp syslog on po...

GlobalProtect For Linux

Hi, I want to add linux globalprotect agent on my portal for customers. How can I do that? Ubuntu and centos for both. Thanks for help.

Palo Alto 3050 high DP and MP planes CPU utilization

Hello Folks, I have upgraded my palo alto HA cluster (model 3050) to version 9.0.3-h3. All of sudden i have started facing high dp as well as mp planes cpu utilization. There is no much traffic on the firewall. Connection table utilization is also around 20% in peak time. Wanted to check if it is anyone has come acrossed such issue..? Thanks!

Configuring external connection through a switch

Hi,Initial config query! We currently have 2 leased lines going into a managed switch for failover capabilities with then a single cable going into our existing firewall (Zywall).This weekend we would like to switch out the existing firewall with our new PA-850 but retain the managed failover switch within the dataflow (this will be replaced in ...

SSL decryption( Some traffic is not decrypted)

Dear All, I have applied SSL forward decryption in my Paloalto, then i observed some traffic are decrypted and some traffic not decrypt.Example:- I have applied the decryption in social-networking (Facebook traffic is decrypted but Snapchat traffic is not decrypted,however, both are falling under the social-networking category.) Why it's strange...

Diplay file in disk folders

Dears,when I apply following commandshow system disk-spacemany folders displayed. can you help me to display all files in this folders (/opt/pancfg,/opt/panrepo, /dev/shm, and /opt/panlogs) ?Filesystem Size Used Avail Use% Mounted on/dev/sda3 3.8G 1.1G 2.5G 31% //dev/sda5 7.6G 2.1G 5.1G 29% /...

Wildfire False positivs ... more than usual

Hi community In our environments we start getting more and more fals positivs from wildfire where documents (mainly docx and xlsx) are flaged as malicious without any reason, or at least a reason without details in the WF report. I wonder if you see the same over the past about 7 days?

User dropped when uses GlobalProtect

Hello. I have an issue when users use GlobalProtect to access internal resources (my policy is restricted by username).PA Release: 8.1.11GlobalProtect: 4.1.12-3 Initialy they access without any problem the whole set of resources and we see the user is identified by the User-ID. -----------------admin@PA1(active)> show user ip-user-mapping all...

OSPF BPA PARAMETERS

Hi Everyone, We r using OSPF over IPsec tunnel.We have two tunnels and failover dynamiclly.But when we r shutdown one tunnel there r many pinng loss(10 ping loss).We want to minimnize this value.Did any one do that before? Which value we should use for this config?

Search EDLs

Is there a way to search my current EDLs for an IP?

is there a pan ansible module for globalprotect gateway config , client config , split tunnel rules