hsts

Hi,

Sorry to ask a  general question here 

Is there  a reason sometimes hsts break the connection with an error (your cnenction not private ).

If two persons using same browser (eg; chrome ) , for first person it works and second does not 

Is there somet

web-server certificate

Hi,

The certificate issued by the palo alto expired , 

What to do to renew 

Thanks

Link Failover with BGP to Multihomed ISP

This configuration it's for a very particular case on my site.

I have three links with two ISP (for example: ISP1a,ISP1b,ISP2)

I cannot annunce at the same time my entire class over ISP1a and ISP1b for two reason:

1) BGP loop problem

2) For ISP commercia

Globalprotect Mac

Globalprotect stopped working - I unistall and installed again and still not connecting

I am using Mac Sierra version 10.12

Please any suggestions?

Thanks

Rachel

Global Protect, Radius, SecurEnvoy, question

We had a strange issue with our 2Factor breaking this week, logs looked to be showing a radius auth MD5 missmatch. Between PAN 3020 and SecurEnvoy.

During that time we had to many hands on the issue, and feel the team made it worse...

So some back gr

Services

Is there anyway in the traffic monitor, or the ACC or any other logs to see what services are being hit? I can see applications but not specifically services though to can add specific services in the rules

Fan failure in Palo Alto SNMP monitoring

is it possible to monitor through SNMP oids for Fan failures in PA 200, PA 500 and PA 5050.

Should we use different oid for each platforms.

GoToMeeting no longer working, http-proxy blocked

I'm using PAN-OS 7.1.8 on a active/passive HA cluster of PA-3050 devices for the perimeter.   Just recently, people started complaining that GoToMeeting no longer works.  When I investigate a test session (http://help.citrix.com/getready), the sessio

Subscribing to taxii output?

We're trying to subscribe a few products to taxii outputs and so far we're not having any luck. Some questions which might help here are:

1) How do we enable authentication on outputs? There are warnings about it in admin and whatnot, but I'm not p

iperf is always matched as unknown-udp/tcp

Is there any reason why iperf traffic in either TCP or UDP is recognised as unknown-udp/tcp by the PAFW?

there is an app-id called 'iperf' but it never matches.