Resolved! Public CA signed certificate

Need to confirm on certificate if  only CA option is checked  then it is Public CA signed certificate?

which type of cert it is when only CA option is checked?

Resolved! nested device group

i am trying to understand below from admin guide

Without a hierarchy, you would have to configure both function- and location-specific settings for every device group in a single level under Shared.

if anyone can explain me in more detail that will b

Resolved! Admin password problem on CLI and Web Interface after panorama upgrade

Hello everybody,

I upgraded my panorama m100-series to 8.0.13 and since this upgrade, I cannot login in my panorama through CLI and Web interface with the default admin account (Password was changed of course).

When I try to log myself, it says that

Resolved! GlobalProtect App deployment with gateway already configured

Hello,

I'm at a confusion regarding if it's possible for GP users to download the App with the gateways already configured for connecting so that they don't have to enter the gateway after it's installed. 

My use case is easier deployment for single-g

Resolved! log forwarding to m500 and SIEM

we have panorama in active and passive and all firewalls are connected to it.

We have m500 log collector and when i run below command 

sh logging status 

i see the firewall is sending logs to m500

also we have configured logs to be send to SIEM.

1>Ne

Resolved! debug software restart process vardata-receiver

Need to know  if i run this command what will it do?

Resolved! GlobalProtect restrict to approved devices

Hello,

I am trying to restrict what devices users can log in to GlobalProtect with to only machines that we have given them.  Since all of those machines would be domain-joined, I would expect that I can import an AD group that contains those machine

Resolved! Vulnerability Protection Signatures

Is there a PA best practice regarding how to handle Vulnerability Protection signatures with severity ratings of high in custom profiles? Should rule actions be Drop, Reset-Both etc

Resolved! DDoS against their DNS servers and protection

what is best way to protect the DNS servers against the resource exhaustion because of denial-of-service attacks ?

should we use zone protection

or 

DDos protection?