what is the best for social-networking category ,Decrypt or no decrypt

Dears

In my company ,unfortunately, allow facebook.com website

we note when do "SSL Decryption" for social-networking category ,There is huge utilization on CPU (Up to 85%)

what is the better for this case as design  : Decrypt Facebook or no decrypt

FW Logging Prefix list

Can any one confirm that when we configured log collector group with two managed log collector (both active and passive Panorama's) and if see the logging status on the firewalls does it show only the Active Log collector or both Active and Passive l

URL recategorization

Hi,

I would like to know how I can receive details on why a URL is placed in certain category and not another.  I have a specific one that I submitted (nbcnewyork.com Palo Alto states is Entertainment and Arts) however the employees submitting this f

NAT allocation during a pool configuration.

Team,

We have a NAT pool configured for one of the ongoing requirements. Is there a way to force this pool to allocate IP address from start to end as per new requests come in?

e.g. NAT pool configured is 10.10.10.1 to 10.10.10.10

IP source is anything

Security Policy not HIT after work for 1 month

I got setup 6 AWS VPC with direct connect connection to on prem panorama, which is working fine for a month, and now suddently all 5 VPC disconnected from panorama in the same time.

i checked the BGP and IKE all established, i can ping the panorama I

PA System Logs

Dear Expert ,

I need to get all System messages of PA in case of the below Events

• CPU Errors, warnings.
• Memory, RAM utilization warning, problem.
• Hardware failure, problem. .(Physical Events)
• Links , interfaces down.
• Processor warning.
• Disk warning.
• Fan wa

hi Community

Hi all,

We have upgraded globalprotect version 3.1.4 to 4.1.2. Its connected successfully . But after some time it saying portal not available. username take as portal name. anyone experience with globalprotect 4.1.2???

Custom HIP Check for Linux

Hey guys,

I've been tasked to have Globalprotect only allow company owned devices over the VPN. I know I can create custom HIP checks for Windows/Mac (reg/plist value). How would I do the same for Linux clients?

I have two end users that work remote,

PA-VM guest ethernet1/x in VMWare Workstation can't communicate with the host OS or any other hosts

My topology is as follows.

PA-VM-ESX-8.0.0.ova image was downloaded from PA support site and installed on VM