SSL Expired Cert and SSL decryption

We have vendor site which we access.

Recently their SSL cert expired and when I try to access that website chrome shows cert is invalid and still in brower it shows

it is decrypting the website and i can see the PA cert there.

Traffic log shows isessi

Dynamic External Lists for Hostnames

Trying to figure out the best way to accomplish a task. 

1. We have a "Suspicious" rule on our firewall that should be where we place hostnames for users that are observed to have questionable traffic.
2. This will be a dynamic list that will be updated by a

Lost communications via HTTPS

Hello all,

I had a problem with a PA-220, version 8.0.9.
Suddenly I lost HTTPS service for the management interface, It was still working but I only had access via SSH.
When I entered #show deviceconfig system service I couldn't see the services HTTPS &...

Verify Global Protect Clients Connecting using TLS v1,2

Is there a way via the CLI or by viewing a log in the gui that I can verify that my Global Protect VPN clients are connecting using TLS V1.2

disable automic start globalportect and create a shortcut

Hello,

My customer need a "GlobalProtect msi" to ditribute by GPO that complies with the following.

- Customize Portal URL. That is Ok, we edit the with orca software https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkwCAC.
-

Why is "set address BLAH tag BLAH not working?!

admin@PA-5250-LOANER# show address TULLY
set address TULLY ip-netmask 192.168.15.245
set address TULLY tag Safenet_Listener_Service
[edit]
admin@PA-5250-LOANER# set address POPLICOLA tag Portal_Services

Server error : tag 'Portal_Services' is not a valid

Syslog Fields Mismatch the documentation PanOSV9.0

I have syslogs coming to my SIEM from the device with PanOS V9.0. The number of fields i am receiving and the number of fields specified in the documentation doesnot match.

For example, in TRAFFIC logs,

1,2019/05/09 15:09:20,xxxxxxxxxxxx,TRAFFIC,end,2

remote vpn access wont fallback to local after ldap?

i created a remote vpn with gateway and portal , but in both configs i set the local authentication in the authentication tab after the ldap but if the ldap authentication fails it wont fall back to the local authentication? 

How to get IP public of GitHub

Hi All I am considering to use Minemeld in company with Palo Alto Firewall. I tested it and I saw it support to get IP of AWS, Google Cloud, Azure but I didn't see GitHub. So how I can create custome Miner to collect IP public of GitHub. Please help