How to check if a specific port/servic is getting passed throgh the firewall to a specific Public IP address

An IT Auditor stated that SNMP is listening through the firewall for a specific Public IP Address.

I have been filtering the network traffic on the PaloAlto 3020 for that specific IP address and also filtering with port 161.  BUt Id not see any res

Decryption: Client and decrypt profile version mismatch

Hi folks,

Have been seeing a lot of "'Client and decrypt profile version mismatch. Supported client version bitmask: 0x08. Supported decrypt profile version bitmask: 0x60. ' errors in the log lately. This article:

https://docs.paloaltonetworks.com/

My PA-450 is not showing Network activity in the ACC tab

Good Morning!

I am not seeing any network activity in the ACC tab for my 450. I've cleared all filters just in case, restarted the management plane, I even failed over to see if it was isolated to the one unit. Both are showing this. When I set the

Custom EDL List not getting Populated

Hi Community,

   Have configured EDL IP & Domain's list. Test source URL is accessible but its not showing any entries in the list.
   In IP list it showing only 0.0.0.0/32 but actual list is not showing.

   Please advise.

Pan OS version: 10.2.7

Study Guide PCNSE in contradiction with the Technical doc.

Hi !,

Just want to be sure please, The study guide page 181 mention that to use data port for HA1 link and management port as HA1 backup but it's not what is written in the technical doc... HA1 on Mgt port for PA without dedicated port and a data por

Certificate to secure 100 plus SD WAN PANFW management interface for webui

All

I plan to secure web interface for management of PANFW. we use data plane IP to manage all FWs.  Is there way to deploy certs to each PAN via Panorama or it has to be done one by one. If any one did this before Please help and share

Thank you

NGFW Saas Azure Logging

I have deployed the NGFW in Azure in a vnet. We had to redeploy due to a spelling error now we cannot set up the logging . We enable logs and save to a log analytics workspace. Acts like it is going to save but does not . Error provided . Error readi

Dynamic User Group Auto Remediation configuration

Zero Trust architecture is the new trend of Security Philosophy based on the principe, never trust and continuously verify trust, which means even if the user is authenticated and permitted to access corporate resources with least privileges usi

Agcinvokerutility.exe - Adobe Utility

Hi All,

Recently our Palo Alto flagged Agcinvokerutility.exe (Virus/Win32.Wgeneric.Eedlvy(624280308)) as malicious. A quick search on the virus signature on Virus total confirmed it to be highly malicious.

However, Agcinvokerutility.exe is also a

PA-410 GUI is very slow over IPsec vpn

We are deploying new PA-410,450,440 in remote location. From Head office firewall to Remote location there is an IPsec vpn.

When users from HO try to access PA-410 firewall over GUI it took 10 - 15 minutes to load. During this GUI loading data plan