Resolved! PANOS 8.0.7 SSL inbound inspection affects SSLLabs scroe

Hi,

When we do SSL inbound inspection for some of our web servers, SSLLabs test scores goes from A+ to B. I also tested with "openssl s_client -connect mailadmin.artvin.edu.tr:443 -showcerts" and it show the same problem. The problem is, when doing s

Resolved! How to export sample miner from minemeld app in autofocus

Hi experts,

I have a customer who uses Autofocus with Minemeld and, uses splunk. 

This customer is using two minemeld. One of Minemeld is from Autofocus app and, another is Standalone Minemeld deployed on Splunk. 

but, I found out difference numb

Resolved! Policies > Tunnel Inspection

Hello Does any one have example of how to configuring tunnel inspection in GUI under the policy tab.

Thank you 

Resolved! GlobalProtect and general Internet access?

Hey folks,

Using PAN-OS 7.1.15 and Globalprotect client 4.0.1.

Trying to confirm something.  From what I can tell, when connected to VPN via GlobalProtect, my general internet access goes through the VPN tunnel route successfully (after security rule

Resolved! GlobalProtect client can't authenticate anymore after upgrade to 4.1

We have upgraded our firewall to version 8.1 and the GlobalProtect agent to 4.1.

We use a certificate to authenticate with our GlobalProtect Agent but after the upgrade (8.0.5 and 4.0.3) nobody can't authenticate anymore.

In the logs I always see this:

Resolved! SNMP Paloalto

Hello !

I want to do snmp polling to a palo alto firewall, but not using any management "software" (like zabbix). I'm trying to do it via bash command snmpget, in which i pass the object OID 1.3.6.1.2.1.25.3.3.1.2.1 (CPU util on the management plane)

Resolved! PA inbound decryption

PA drop (decrypt-error, policy-deny) packet when client present a certificate (SMTP STARTTLS).

PAN OS version: 8.1

Test cases

1) Client cert TRUSTED, TLS 1.2 with ECDHE-RSA-AES256-GCM-SHA384

Client send Certificate Verify TLS payload

openssl s_client

Resolved! Panorama fails to deploy PanOS to Firewalls

We have a Panorama (M-100) managing several PA5020 firewalls. We need to update the PanOS from 6.1.7 to 6.1.10 (don't push for higher this is all we can do for now). I've updated the Panorama to the 6.1.10 version. Now i try to use the deployment sof

Resolved! User ID agent user-IP mapping refresh evets

Hi Experts

As you know the default cache time for user-IP mapping in user-ID agent is 45 minutes. If I am not using WMI or netbios or server session monitoring then:

1- How user-IP mapping can be maintained by user-ID agent? This means user has to lo