so TLS 1.3 got IETF branded

hey there,

since tls 1.3 is now a ietf standard, is there any use running ssl-decryption in the close future?

as far i understand 1.3 documents, it "looks like" 1.2 for the firewall, so there's no way to just block 1.3 and force both parties to downgr

Redirect Users to GPCS Portal for Agent Download

I am trying to figure out a way to automatically get users to my GPCS portal so they can download agent. I have tried setting up the captive portal but that doesnt seem to do more than authenticate my users so i have user-ID info. Would there be a wa

PA200 not enought network port

Hello everyone

I have a PA200 which has only 4 network ports. But now I have 2 direct internet connections and 2 4g connections and 1 is uplink to my network. Would it be possible to connect a port of the pa200 not directly to the router but to a smal

Lotus Notes decryption

We have a potential customer who would like to analyze email attachments in sandbox. They are using Lotus Notes as their mail application/server. Has anyone tried decrypting Lotus Notes traffic? 

Because if this doesn't work the only solution is a cli

Swapping the roles of Firewalls in HA Pair

Hi Guys

I want to swap the Active/passive roles of the Firewalls in HA pair and let it run for couple of weeks.

I know that can be done by 'suspending the role' from GUI and from CLI too.

want to be careful about pre-emption and donot want to break the

Blocking XPS file types

As of late, Ive been seeing more and more xps file types tied to phishing attempts. PAN does catch it "Microsoft Phishing Site Detection", but as a for production. XPS files are not needed.

But as simlar files types are list to be blocked "pdf's, etc

Minemeld and production installation

 Hi,

I'm considering how to do some of the following, if anyone has advice or links to documentation I'm not finding I would appreciate it:

1. Export the configuration in a way that any local custom miners are also backed up, meaning the restore is a li

what is the best for social-networking category ,Decrypt or no decrypt

Dears

In my company ,unfortunately, allow facebook.com website

we note when do "SSL Decryption" for social-networking category ,There is huge utilization on CPU (Up to 85%)

what is the better for this case as design  : Decrypt Facebook or no decrypt

FW Logging Prefix list

Can any one confirm that when we configured log collector group with two managed log collector (both active and passive Panorama's) and if see the logging status on the firewalls does it show only the Active Log collector or both Active and Passive l