Is it possible to monitor PBF rule status via SNMP?

Hi-

Is there a way I can get our PA-220 to alert our SNMP monitoring system when a Policy Based Forwarding rule fails/activates?

I've set up SNMP on the firewall, added a device entry in our PRTG monitoring system, and set PRTG to automatically detec

IPSEC Tunnel messages and failure

On Weelkend, one of our tunnels was down for about an hour. I was checking system logs and found these messages repeatedly for that tunnel, even after it is up. Anybody knows what this means and what to look for in logs to find the cause of tunnel fa

Google Safebrowsing miner

Google has a threat list api, has anyone created a miner for it?

https://developers.google.com/safe-browsing/v4/lists

How to save the API Key and make proper use of the REST API calls

Not sure if this makes sense -- plan to use Palo Alto's REST APIs for automated script tasks and health checks.

Is there a way to save the key into a variable string -- therefore you can make multiple API calls and reference to the output key?

Want t

High availability failover due to high dataplane usage

our internet went down a few weeks ago when our primary PA failover to a secondary PA. We found out, after doing some research and investigative work, that this was due to the amount of new session created, which cause the PA to use the slowpath and

How do I fix this?

Trying to connect PA-500 to user id agent on domain member server and keep getting this from the agent ID app log.

10/02/17 18:33:09:959[ Info 1219]: New connection 10.100.20.20 : 33369.
10/02/17 18:33:09:975[ Info 1292]: Device thread 1 with 10.100.2

How to count sessions at Palo Alto.

Hello all.

Syslog multiple configurations

I am having no issues actually sending syslog data.  The issue is sending to much over the network.  I have two different applications that require syslog data from the firewalls.  One application requires all the logs with all the content.  The othe

packet-diag flow basic “matched rule index 0”

What does the rule with the index number 0 refer to in the packet-diag flow basic for the security as well as the NAT policy? The id manager does not show a security nor nat rule with an index 0 while the show session shows that the traffic was match

Problem with NAT

Anyone running Sophos antivirus/webfiltering solution on client machines?

It appears that the sophos client on the windows machines uses its service account username to browse on behalf of the user. So essentially being a proxy for the user, the issue is from the monitoring aspect of the palo alto, I can't see the true use