High latencies after HA failover

MS-Update identified as a threat, there are no corresponding entries in the threat logs, URL filtering log or data filtering logs

Hi team,

Although MS-Update was flagged as a threat, there are no corresponding entries in the threat logs, URL filtering logs, or data filtering logs explaining the basis for its classification as a threat

The first three logs indicate that the

SSH and console login blocked

cannot login to Palo Alto SSH and console using super admi user. From console it shows error = "user not known to the underlying authentication module"

From SSH it shows error - " Access Denied".

SSH screenshot attached.

Palo Alto syslog service/daemon restart

Hi,

I have three PA-7080 firewalls that have Log forwarding cards (LFC) for forwarding logs using a syslog profile. I use the "debug log-receiver statistics" command to show log statistics. In the output, I found two fields 'log incoming rate' & 'log

Unable to download software and dynamic updates

Hello Team,

We want to upgrade the palo alto device from current version 10.1.5-h1 to version 11.0.

DMC Web Server Configuration Issue- Need Assistance

I'm currently encountering an issue with the configuration of my DMC web server. Despite user Experience, APK Zip file, android users FM WhatsAp trying various troubleshooting steps, I haven't been able to resolve this issue. Has anyone faced a simil

Auto Commit Failed and Gray Interfaces after upgrade to 11.0.2-h2

Upgraded to 11.0.2-h2 on my 410 last night and the interfaces were all showing gray after reboot. Auto commit was failing with the following error and just kept trying and trying.

client device phase 1 failure
Management server failed to send phase

OSPF issue betwwen PA VM-100 and Cisco 4431

Hello everyon,

I have an strange issue with OSPF, it is working normaly but one or two time in 24 hour palo alto loses its neighbors for 1 to 5 seconds. 

I tied to troubleshoot and get message:

**** AUDIT 0x3e01 - 210 (0000) **** I:001d0046 F:00000

SFTP file transfer restrict

Is there a way to restrict the use of SFTP for file transfers?

The condition must be allowed SFTP, but restrict only permit upload and deny download, or only permit download and deny upload.

application based rule

Hi All ,
We are planning to implement application based rule like under application tab add required app and under service tab add application default.
However what would be best approach to apply rule where application is showing "incomplete".
Currentl