General Topics

I can't decryption some web-site

Hi Expert ,

I was found an issue about after that applied decryption policy such as just facebook site but when access facebook occurs htps site restriction   I don't have license URL and threat prevention  

Kindly please suggest to me.

Route daemon configuration load phase-1 aborted

Hello,

I am getting "Route daemon configuration load phase-1 aborted" alarms under type-'Routing' , severity as 'Informational' and event as 'routed-config-p1-abort'.

Why we have these alarms and what they're indicating? could someone provide details

Not-Applicable, Incomplete, Insufficient Data in the Application Field

We're having issues with regards to VOIP on a Shoretel system.  We have a Site2Site connection back to our HQ office and our phone system is down.  When I take a look at the logs, I see Insufficient data and imcomplete in the application field.  Can

LCAP down on Passive Firewal

Hello team,

In an HA environment, with pre-negotiation for LCAP disabled , but passive link state set to "Auto" in the HA configuration, if all physical interfaces show as up, is the AE (Aggregated Interface) supposed to be up or down,  as the partne

Browsing Quota Time ?

I am coming from Forcepoint from a proxy perspective.  My questions is, does the Palo Alto support user browsing policies, and user quota times ?

I am looking to have some block list and white list created.   I am also wanting to give certain users l

Security Profiles on Deny Rules

What is the best practice for adding security profiles to deny rules?  I like to add the URL profile to deny rules so I can see what URLs are being denied.  Who else adds security profiles to the deny rules and what benefit do you get? Has anyone had

Cisco ASA and Palo Alto 820 with multiple Proxy-ID

Trying to replace a site to site VPN Cisco ASA firewall with Palo Alto PA-850.  Cisco ASA on this side has multiple ACLs configured which is equivalent to Proxy-IDs.  It is configued with IKEv1, policy based, no IKEv2.  I do not have access to the fi

Firewall Throughput

We have a PA3050 in a very simple setup.

1 outside interface and 2 inside interfaces (aggregated). 

A few times a week our clients complain about performance. During this time the firewall is generating 1Gb throughput (flat-line).

However, the through

user-id

Hi Community,

I am running PA local user-id agent in PAN os 8.1.3

i am facing an issue that my server monitoring is shows as 'not-connected', i am able to test the authentication and proper service account is configured. it was working fine for long t

Change keyboard language in Palo Alto CLI

Hello there!

How can I change the keyboard language in the Palo Alto CLI?

Is it possible to access linux mode within the Palo Alto CLI?

Thanks!