Decryption: Received fatal alert CertificateUnknown from client

Hi Folks, 

I'm seeing some instances of "Received fatal alert CertificateUnknown from client" errors in the decryption log when the root\issuer certs are clearly in the FW's cert store. Attached are screenshots of the error and the FW's cert store.

Firewallcrash because of Application cloud Engine (ACE)

Hi community

Since about 2 weeks a vm firewall started getting problems with random crashes. Our setup is a firewallcluster but so far the active firewall crashes almost completely silent. At least the firewall does not initiate a failover to the p

About certificate

Migrating configuration from the firewall running PAN-OS 9.1 to new firewall running PAN-OS 11.1 directly

Hi LIVEcommunity

I plan to migrate the configuration from a PA-3020 firewall currently running PAN-OS 9.1 to a new PA-1410 firewall running PAN-OS 11.1.

I'd like to know if it's possible to directly import the configuration from the older firewal

Zscaler Traffic Pattern

My company users are using ZCC on their laptops. Recently, there has been an issue where Zscaler traffic is being denied by the Palo Alto Firewall.

Upon checking the logs, it appears that the ZCC traffic pattern changed into web browsing and HTTP Prox

Unable to Block Personal Gmail on Ubuntu Machines.

Hi Friends,

We have a customer who is facing issues in blocking Personal Gmail on Ubuntu Machines.

I have followed the below mentioned discussion and created the URL filtering and Policies.

https://live.paloaltonetworks.com/t5/general-topics/block-

FW Policy Skipped When Either App-Based only or SMTP-BASE app and 587 Port is Defined

Firewall is skipping policy when the traffic has smtp-base port 587 on it. 

I created a firewall policy application based with smtp-base as application but it skips the policy goes to the implicit interzone deny policy. So I created it with by just po

Migrate OpenBDS firewall to Palo Alto

What would be the best approach for migrating the OpenBDS firewall?

In a scenario where there are 4 units of OpenBDS and consolidating into 2 units of Palo Alto.

Would the Expedition tool able to merge the policies?

Any other things to note for the m

Looking for someone familiar with Palo Alto Firewalls

Hello all,

I'm with a company that has just been offered a project to review a certain university's firewalls but we can't take it on as none of us are familiar with Palo Alto systems. However it would be nice to be able to take on projects like th

Commit error<mlav-engine-urlbased-enabled unexpected here> after upgrade version to 10.2.10

we upgrade pa-5220 version to 10.2.10 ，and then meet a commit failed as below，anybody have same question and anybody could give me some suggestion？

Validation Error:

profiles -> url-filtering -> STD_UF -> mlav-engine-urlbased-enabled unexpected here

Global Protect Integration with Azure SAML w/ Multiple Gateways

I'm trying to setup an integration with 2 firewalls at different locations.  The portal and 1 gateway reside on 1 of the firewalls, and i've used this:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE

to get that