Packet flow not properly defined

Hi Team,

i have seen two diagrams of packet flow from palo alto website. in Below NAT Policy evaluated is shown in first step. which is part of Network processor (slow path) and NAT applied after  Application  and security Policy it means from securi

Agentless vs Agent based User-ID

Hello,

We have 500 users on site and currently using Agentless User-ID with PANOS 7.1.7

We are thinking of scaling up to Agent based. 

Can someone please guide me to a link/article that discusses the Pros and Cons of both? 

What are the common issues

MineMeld engine:fatal message

I'm getting the below message in my minemeld logs and not sure what is causing it  

2018-07-11T00:30:28 (16652)config._destroy_old_nodes INFO: Destroyed nodes: [_ConfigChange(nodename=u'Amazon_IPv4_Agg_General', nodeclass=u'minemeld.ft.ipop.Aggrega

Security Policy Default Columns

How can I modify the Security Policy default columns and order for all users, not just my view? 

PAN-OS for refurbished Lab Appliance

Hello,

I've bought a refurbished PA-500 for my lab.

Is it possible to get current PAN-OS images for this device?

Regards,

Martin

Supressing Application Dependancy Warnings.

On our "SKYPE" rule I have removed web-browsing, this causes dependancy warnings on commit.

I read this "solution"

https://live.paloaltonetworks.com/t5/Management-Articles/Application-Dependency-Warnings-with-Allowed-Enabler-Application/ta-p/55142

Bu

User or group

Can you add a user group under the user tab in a security policy

"Top Domains" report?

I think I've asked this but can't find the thread.  What is the recommended way to get some kind of "Top Domains Visited" report?

Everything seems to default to rdns of the endpoint which is not much use sadly with cloud/online content providers i.e.

Panorama Disk spare alarm.

HI All expert

my panorama M100 having an issue with disk space 95% in used need to clean up. I tried to delete all the core file and all the software and patching download but the Alarm still remain.

Tried to monitor few days but it's still there....

Firewall rules - strange suggesttion

Hi

I gave a rule that allows snmp-trap messages to my SNMPD server.  for some reason PA complains that SNMP-TRAP needs SNMP-BASE.

Now if I add in SNMP-BASE this is going to open up port 161 where as trap uses 162.

So why do i need SNMP-BASE

Multi Factor Authentication Raduis Server Must be Restarted in order for MFA to Function Properly

I am currently testing Multifactor Authentication using a Radius Server.

1. I have a test group of users who have been configured on my Radius Server

2. The MFA Radius server is alway reachable via ping/icmp at all times

3. MFA via the Radius Server wor