Certificate not valid

I am trying to setup Machine authentication, where it actually validates the machine certificate, I have a PKI infrastructure, that pushes certificates to the machines, with there name in Common Name, and SAN, of the machine hostname. 

On they Certif

UserID Agent version compatbility

Hello,

I'm currently working through the Certificate Advisory.  We currently have firewalls running 10.1.11, user-ID agent is 10.1.1-102.   Started an upgraded firewalls  to current preferred version of 10.1.13h1.  The issue I have is I am simultan

No valid AceMlc2 config: SC 1 (AceMlc2): Config not valid

Hello all,

I need some help troubleshooting these low severity logs that keep popping up.

This is happening on a PA-3220 which is running 10.2.9.

The output of show ctd-agent status security-client is:

[snip]

Security Client AceMlc2(1)
Current clo

Issue with PA-1410 platform disk size

Hello Team,

                  Recently we have deployed PA-1410 in our datacenter and since first day we are having issue with disk space in loggin.

and after contacting the support, logging is not more than a week which is not accepted from our side

Panorama high MIB memory

Hello community!

We are monitoring the Panorama system resources and we get alerts regarding memory (MIB). We don´t have any performance issues though.

Can you advice if the following memory levels are fine or it´s too little memory free?

Panorama IOS required for EVE-NG and RAM requirement

Panorama IOS required for EVE-NG and what is the requirement for RAM. Please help me on this.

Thank You

Negate networks within an object group

Hi,

is it possible to negate certain networks within a rule?

example.. src (192.168.0.0/16) and dest (10.0.0.0/8) action Deny

but want to negate dest 10.200.0.0/24 in the same rule so that 192.168.0.0/16 cannot talk to 10.0.0.0/8 but can talk to 10

Help with XML api device configuration

I'm looking for a solution to automate sdwan deployments so I'm trying to do a couple of things with this api call:

1 - create the layer3 subinterface interface

2 - give the subinterface an ip and next hop ip

3 - enable sdwan on the interface and g

Decrypt STARTTLS SMTP protocol but not blocked Virus File

The mail server resides on the network inside PaloAlto.
I am trying to add a feature to use STARTTLS for SMTP/25 from the mail server to the Internet.

I implemented STARTTLS decryption (Forward Proxy) on the PaloAlto and sent an email with Eicar Virus

Block Exchange ECP externally

Hello team,

We are experiencing with our hosted exchange server on the cloud. Despite efforts from our Server team to block ECP access from external networks, it remains accessible. The team has suggested blocking ECP for external networks only.

I