Questions about the decryption performance of pa-5200 series

The customer configures inbound decryption on the firewall.
When the decrypted traffic exceeds the processing performance of the firewall,
the firewall will not decrypt the traffic that needs to be decrypted. Will it be processed as normal traffic?
C...

Path monitoring vs BGP

Hey community,

We have a dual ISP environment, when one is used as a backup if the primary line stops working.

I'm wondering what would be the best approach to configure HA in this situation (on the VR). I did it with path monitoring as it seems much

Stuck in - Server rebooting - please wait while the server reboots

I have a PA440 running PanOS 10.1.3, it seems to be processing traffic normally, but I cannot reach the GUI, it seems stuck at this loading page. The external interface is pinging just fine. I have CLI access, what command lines can I run to troubles

PA vm series - CPU history usage in graph

Hi community members,

May i know if PA vm-series, how do i check the CPU and memore usage history graph for past 1 day or past 1 week  in web console?

Thanks for help in advance.

Thanks

is it recommended to send layer 2 traffic over PA firewall?

is it recommended to send layer 2 traffic over PA firewall?

Evaulation License

I have got Eval License from Palo team(For studying purpose), now I have deployed in VM however I would like to activate the trail License.May i know what is the procedure?

Please be informed I don't have support account.

AE interface on PaloAlto HA Active Active configuration

Hi All I have plans to change my Palo Alto PA3200 HA from active passive to active active.

What I still have doubts about is the ae (aggregate) interface on active HA, is the mechanism the same as the layer 3 interface, which requires a floating IP

Security Rule hitcount not incrementing, but traffic monitor shows rule being used on PA-850

Hi Community!

Recently I stumbled upon this weird behavior where a security rule shows 0 hit-count, but when looked under the traffic monitor lots of traffic is being allowed by that rule.

This is the rule in question (0 hit count marker):

This is

Can we configure Layer 2 Trunk between Cisco Switches and PaloAlto Firewall in Layer 2 Deployment?

Can we configure Layer 2 Trunk between Cisco Switches and PaloAlto Firewall in Layer 2 Deployment?

Does the Palo Alto Firewall in Layer 2 Deployment capable to tag traffic VLAN using DOT1Q with Cisco Switch?

Nmap open port

I find myself confused regarding the following case: when running a scan with nmap on an IP address that was previously on my access list, nmap indicates that the ports are still open.

C:\Program Files (x86)\Nmap>.\nmap.exe xxx.xxx.xxx.xx -p 22,3389,5