FTP Data Transfer very slow through Palo Alto

Dears

I created Local ftp over Tls through Palo alto . I published this server and create both nat rule and security policy rule and i am connecting from internet using filezilla but the transfer rate is very slow 25KB/Sec . I have dedicated leased l

How to configure QoS with a limit per user

I am looking to configure our Palo Alto firewall to limit every user on our network (approx 5,000) to 10Mbs or less. I have a 1Gbit pipe. The documentation I have seen so far has shown how to do this for 1 person.

How do I set it up so that 1 rule co

dnsproxy - resolve-fail in system log

hello 

i'm seeing a ton of these message in my system log.

do you know what does mean this?

what cause this log?

ggranular sharepoint filtering

I am trying to implement granular url filtering within sharepoint site but firewall is considering it as a generic. Eg: https://xyz.sharepoint.com/pages/department/* is the url I want to allow and block rest of sharepoint. Whenever I try this link,Fi

DMZ with multiple VLANs, multiple Zones?

If you have a DMZ behind the Palo and it contains multiple VLANs or sub-interfaces, would you create multiple Zones(one for each VLAN)? Or create a single "DMZ" zone and apply that to all of the VLANs?

Disk quotas can not be computed due to disk

Hello Team,

We have seen in the PA 5200 series that the following log appears: "Disk quotas can not be computed due to disk" It appears just after the boot in the system logs. Have you ever seen this log? What it means? Is dangerous for the firewall?

P

ACC - session number meaning

Hi,

  Does anyone know what exactly session number indicates under ACC? For example, we have a specific app

which has constantly around 250K sessions on the firewall. However when I click ACC and set time as "last 15 minutes"

for this specific APP, I se

so TLS 1.3 got IETF branded

hey there,

since tls 1.3 is now a ietf standard, is there any use running ssl-decryption in the close future?

as far i understand 1.3 documents, it "looks like" 1.2 for the firewall, so there's no way to just block 1.3 and force both parties to downgr