expired or resetted password issue with GlobalProtect Agent 4.1.6

An expired password change or a resetted password cannot be changed when using the Global Protect credential provider and PAN agent 4.1.6

I re-installed PAN agent 4.1.2 and tested this to verify if it was PAN agent related because this issue was a new

Unable to get multiple global protect working.

PA3020 ,8.0.12.

I have working GP with a public ip.

I am trying to setup 2nd GP with 2nd public ip.

This 2nd ip is used as destination nat for rdp as well.

When I configure the loopback interface with 2nd ip and use it in portal and gateway ,rdp gets bro

How will threat functionality work with asymmetric routing

Posted this on threat discussions but havent had any responses. Please help me understand what will happen in this case.

I would like to understand what will happen to Threat Protection and AntiVirus(TPAV) in the following case.  Both firewalls have

Seeson end reason aged out

HI friends,

We have created interzone rule looks like below

<entry name="Rule1>
<profile-setting>
<profiles>
<url-filtering>
<member>default</member>
</url-filtering>
<virus>
<member>default</member>
</virus>
<spyware>
<member>Sinkhole</member>
<

Rule base management best practices

Hi Everyone,

I'm new to the Palo Alto firewall system. My experience is with Checkpoint firewalls. I've been asked by management to look into the best practices for rule base management.

Currently we go through the rule and look at every rule and try

Log retention in firewalls and panorama

Hi, I have the following question related to log management:

• why PAN-70X0 can't send event logs to Panorama ?
• are the event logs stored in compressed format ? If so, what is the compression ratio ?

Regards

Mario

Looking for more information about Win32.Conficker.C p2p(12544)

Hi,

I am starting to see this threat id a lot but we are unable to find a machine that is infected.  What does this really mean?

Packet Flow Sequence and Application Override

Hello everyone,

I have a question regarding the "AppID override" ,

In this article "https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVLCA0" we can read the following:

"
Special Note about Content and Threat inspection
Applicatio

Problems with ping due to SSL decryption

Hello

we have PA 220 model

and when we implement SSL decryption we can observe the ping delay in our trust interface.THE cpu load is 50 %

when we turn off the SSL decryption everything is normal