Traffic log action shows allow but session end shows threat

Hi 

I need to know if any traffic log is showing allow and if the session end reason is showing as threat than in that case the traffic is allowed, or it's blocked, and also I need to know why the traffic is showing us threat.

Failed to handle CONFIG_UPDATE_START

Hi All,

I am getting this error while committing (Failed to handle Config_update_start)

I have also gone through kb's articles where i found this is due to high dataplane utilisation.

this error occurs due to High dataplane which increases from  ED

How to add secondary wan pool added in sdwan configuration

How to add secondary wan pool added in sdwan configuration.

Unlicensed device that BPF and Security Policy is not working

Hi all, 

        I am facing one issue for PA-3260 (sw-10.1). This is not unlicensed. PBF and Security Policy is not stable on it. Some time is okay. Some time is not working well.  

PaloAlto base config, not able to commit config after removing vwire references

Hi Folks, I am using Palo-Alto 3260 without panaroma. i want to take base config from it, so we have reset the firewall to factory default and trying to commit config by removing vwire from interfaces and zones. but config is not getting commit and g

Pan OS 10.0 prefered release

Could you please conform Pan OS 10.0 prefered release ?

Google Cloud VPN IKE-SA-INIT packets being dropped

I built a site-to-site VPN between GCP and a PA3250, which is not working. Surely, I'm missing something.

The GCP vpn points to the same interface and IP that other VPNs successfully use on the Palo.

I added a Sec policy to allow the GCP IP and t

Best practices for Dynamic updates

Hi,

Does anyone know what the Best Practices are for dynamic updates?

How to avoid split brain in active passive cluster

Hi,

We've got a installation with active-passive devices in different datacenters. We need to ensure that the primary device is always the active device when there is some problem between datacenters.

We have configured virtual router path monito

ACC Export PDF of application usage lack of colour

Hi all,

I found that when I Export PDF report of ACC application usage,

the report cannot be displayed normally, it will be lack of colour of each application grid like below 

How can I solve it? Is it normal or not? Any document mention this?

LACP load balancing algorithm

Hello Team,

Where I can find information about how traffic balance between physical interfaces in case when LACP used?

Can I choose balancing method in configuration (source/destination, MAC/IP Addr, L4 Ports)?

I found information about traffic distri

Logs showing same Zone for interzone traffic

HI team,

We are try to reach from one zone to another zone in Palo alto firewall. We are able to reach but in the logs something weird we are seeing. the source zone and destination zone is same in the logs for different zone traffic. Is there any clu