Resolved! Granular URL Monitoring

I want to be able to grab full URLs when specific sites are visited e.g. github so I can see what app/repo is being hit. Right now all I get is the domain.

How granular can URL monitoring be? Can I get a full URL from URL filtering or URL category hi

Resolved! PA HA failover and IPSEC connection shows inactive

Yesterday during PAN OS upgrade when Passive PA became active I saw that our IPSEC connections stopped working.

CLI shows status as inactive

I did clear vpn command

test phase 1 and phase 2 still samething.

Only way to make this work was via restartin

Resolved! Can you add a custom report to the PDF Summary PA-850?

I've been trying to figure out if you can add custom reports to the PDF summary report or how I can group a list of reports into one PDF report. My CIO likes the summary report but would like it to be monthly or quarterly and I'm trying to figure out

Resolved! in case of using mgmt port for HA1 how do i replace the mgmt port important functionalities?

i have a small new palo alto , i have read i should use mgmt port for HA1 with the second palo alto , but if i do so how can i make up for the mgmt port important functionalities like updates and dns if i use it for HA? im confused

Resolved! managment port importance?

this is my first time deploying palo alto , is it important to have the managment port connected? does it play important role in the device function or is it just solely for managment?

like can i manage the device from the inside interface only?

Resolved! Passive PA and IPSEC Connections

We have PA in active passive mode,

We have ipsec connections going to end devices.

When i check the passive PA GUI  I see 

All Phase 1 connections as red

All Phase 2 connections as green

IS this normal behaviour?

Resolved! allowing and denying ip address traffic on VWIRE?

i have a core switch and a router which connects to other router to reach the internet , i was wondering if i put the palo alto as a VWIRE between the core switch and the router would i be able to control which ip addresses can go to the internet and