How to determine the cause of a slow network

Hello,
I notice that my network is slow but I don't know how to determine the cause of this slowness. Could someone tell me how to find out please?

What is the Certificate Chain of Trust?

The Chain of Trust refers to your SSL certificate and how it is linked back to a trusted Certificate Authority. In order for an SSL certificate to be trusted it has to be traceable back to the trust root it was signed off of, meaning all certificates

Aggregate interace behaviour

Hi All,

Facing an issue where doing an failover with aggregate interface not working.

Example if I unshut any one link from aggregation link of passive firewall and shut both interfaces of aggregation link of primary firewall, still firewall don'

Inline Cloud Analyze Event Threat missing XFF_IP

Hi, is there a reason why specific events (e.g. Inline Cloud Analyzed SQL Injection Traffic Detection) do not contain an XFF_IP entry?

Host

abc

Service

Events Threat

Event

OK -> CRIT

IP

10.y.z.w

Date/Time

2023-12-13 19:50:48

Summary

CRI

Migration from PA-3060 to PA-3260

I'm seeking advice regarding a migration from a PA-3060 HA pair with PAN-OS v9.1.X to PA-3260 HA pair v10.2.X. 

I understand that to have minimal issues for the migration, it is recommended to have the same OS version. From the Compatibility Matrix

Packets retransmission captured in packet capture on firewall but still seems dropping

Recently trying to debug a possible packet dropping issue at firewall (screenshot attached for reference). The issue is appearing when I try to make request to my server from my iOS device, some API calls works Ok but often few of those fails with 50

Checking admin users password expiration date

The customer wants to check the password expiration date of admin users. Is there a way to check this?

Does the Post-NAT Zone for security policy is for Source zone and Destination Zone?

I read the following from the palo alto study guide:

A Security policy rule requires a source IP, destination IP, source zone, and destination zone. If you use an IP address in a Security policy rule, you must add the IP address value that existed

Demystifying NAT Traversal with VPN IPsec

One of the biggest concepts in VPN Technologies is NAT Traversal, like NAT Traversal in VOIP deployment with SIP Protocol, the story is always inside the payload to solve the Incompatibility between NAT and IPSEC similar to the Incompatibil

Full Cone NAT, Restricted Cone NAT and Symmetric RFC NAT Terminologies versus Vendor NAT Terminologies.

When we talk about Stun Protocol used for NAT traversal in voip environment or SDWAN, the common term used when talking about the Type of NAT that is compatible with Stun is “Full Cone NAT”, then when we explain why Turn Protocol is developped to rep

User ID - Igonere User list

Hi,

I have added a few users to the "Ignore USer list"  for user-id configuration. But when I checked the User-IP mappings I still see the user-id is mapping the username with IPs even though the usernames are in ignore list. Any suggestions on wha

Can we configure Server monitoring using OpenLDAP

Hi All,

Here i have an requirement to configure Server monitoring on Palo Alto firewall with an OpenLDAP server.

Iam a bit confused on choosing the type & transport protocol under server monitoring tab.

Is it possible to integrate the OpenLDAP

How to decrypt ESP IPSEC packet using wireshark

Sometimes you want to see how the tunnel mode encapsulation occurs, especially when using GRE over IPsec and VTI IPsec and you would like to decrypt the ESP or IPSEC packet to see how packet is encaspulated on both scenarios (GRE over IPsec and VTI I