How can we troubleshoot high transmit utilization or high utilization issue on interface?

How can we troubleshoot high transmit utilization or high utilization issue on interface?

we recieved alert from solarwind like below for our palo firewalls:

Summary: itsg_GSOC-XXXXX-Priority:-P3 ALERT: | Hostname | ip address | PA-3020 | serial numb

Old spyware signatures are not sinkholed

I have dns sinkhole in place but the issue here is firewall is not stopping dns resolutions of old spyware(previous dynamic update version) sihgnatures/domains at dns level. Palo threat databse shows the domain as malware but no sinkhole action is ta

Aggregate Interface Throughput limit - Multi VSYS - Shared Gateway.

Hi Community

I have multiple VSYS setup that also uses Shared Gateway for collating access to my Data Centre to and from each VSYS.

I have a PA5250 setup running OSPF with a 40G routed connection to my Data Cente (Northbound) - in the shared gateway

Syslog - Collecting Internal DNS

Hey Everyone,

I noticed my Syslog box isn't receiving internal DNS information from the Palo.  I originally thought the URL log type would capture internal information (yes i'm aware what URL stands for, but I could hope).  However that doesn't seem

Agentless User-ID "Not Connected"

PAN-OS 8.0.9

Server 2008-R2

I am in the process of investigating the setup of User-ID, utilising our test network which has a VM500

I am starting using the Agentless option. ( The production site has 500 users, mostly Citrix Terminal Sessions but also

IPSEC VPN issue

I have realy weired issue, 

I have two sites connected with IPSEC vpn, PAVM200 to PA3020.

the sites are connected with IPSEC very stable vpn, remote site trying to access DMZ zone on the local site.

The routing confiured and policy rule allowing the a

timeout erors

hello.

i tried importing a git file in my extensions, and mine is a proxy server.

i get time out error.

the git file is a taxii new mine.

Miners do not collect any Information when more than 128 nodes

Hello,

I have a problem with my minemeld server. Some days ago I reached 128 nodes (sum of miners, processors and outputs). If I do a commit with 128 nodes or more the minemeld process seems to keep restarting over and over. As soon as I reduce to

Youtube_Channel Miner

Hi Team,

I am in the process of testing Youtube Channel ID miner for a prospect and have completed the configurations as well. Facing a challenge that there are 344 videos in the Channel ID (UCWSpWPuWJKcbo2gGSA-ao8g), but the youtube miners are pol

Cannot download PAN-OS in passive device

Hello,

When I try to download PAN-OS software directly to the passive firewall it says “Failed to check upgrade info due to generic communication error. Please check network connectivity and try again”. It is working fine in Active device.

Is it the

dynamic app-id updates without having threat prevention license.

Hello,

I have query on dynamic App-ID updates without having license for threat prevention.

As per the documentation by PaloAlto, App-ID doesn't requires any additional license but a valid support contract.

Considering a scenario where I don't have th

STIX and TAXII support

Hi all,

Anyone used minemeld with STIX and TAXII?  While we pretty familure with STIX/TAXII - only just booted minemeld for the first time.

Cheers,

Scotty