How will threat functionality work with asymmetric routing

Posted this on threat discussions but havent had any responses. Please help me understand what will happen in this case.

I would like to understand what will happen to Threat Protection and AntiVirus(TPAV) in the following case.  Both firewalls have

Seeson end reason aged out

HI friends,

We have created interzone rule looks like below

<entry name="Rule1>
<profile-setting>
<profiles>
<url-filtering>
<member>default</member>
</url-filtering>
<virus>
<member>default</member>
</virus>
<spyware>
<member>Sinkhole</member>
<

Rule base management best practices

Hi Everyone,

I'm new to the Palo Alto firewall system. My experience is with Checkpoint firewalls. I've been asked by management to look into the best practices for rule base management.

Currently we go through the rule and look at every rule and try

Log retention in firewalls and panorama

Hi, I have the following question related to log management:

• why PAN-70X0 can't send event logs to Panorama ?
• are the event logs stored in compressed format ? If so, what is the compression ratio ?

Regards

Mario

Looking for more information about Win32.Conficker.C p2p(12544)

Hi,

I am starting to see this threat id a lot but we are unable to find a machine that is infected.  What does this really mean?

Boot Partition software version change

Can the software version of a boot partition be changed?  After upgrading to a new version PANos, without reboot no changes can be pushed from Panorama to the firewall.  Can this be revereted without reboot as well?  Or change the version listed for

Unable to change GlobalProtect user name on Mac

We have configured GlobalProtect for AlwaysOn using machine certificates for pre-logon. This works fine on both Mac and Windows. In the portal agent config we have also a gateway configured as Manual Only that the users can switch to for getting acce

ACS Accounting to PAN

I have Cisco WLC and use ACS for radius authentication.  I'm trying to configure PA FW to use those accounting logs for User ID.   I'm following this article but it's not working https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000

Packet Flow Sequence and Application Override

Hello everyone,

I have a question regarding the "AppID override" ,

In this article "https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVLCA0" we can read the following:

"
Special Note about Content and Threat inspection
Applicatio

Problems with ping due to SSL decryption

Hello

we have PA 220 model

and when we implement SSL decryption we can observe the ping delay in our trust interface.THE cpu load is 50 %

when we turn off the SSL decryption everything is normal