Block Facebook app except Messenger or facebook chat on Mobile

When Pushing SDWAN config to fw got this error: pan_routed_cfg_altcfg_add_if(tunnel.902) failed

I am trying to do a SDWAN push for a newly imported fw. The interfaces is not existing on fw.It comes from another PN also configured with SDWAN, moved to new one and all except SDWAN config copied and working. Then added fw into SDWAN device and existing cluster (with 15'ish fws already). Commit to PN (other) is ok. when push to fw we got the e...

Amber LED on PA3220

Hi All, I am getting amber LED on the firewall PA3220. Observed alarm is active for Temperatur : Qumran Switch Core. Can anyone know what is causing this issue and how to resolve. all other alarms are False only this alarm is true. show system environmentals ---> ----Thermal---- Slot Description Alarm Degrees...

Decryption failed

Hi guys , PA820 . OS Version 10.2.9-h1 I am try using the decryption function to see more application informationI generated the CA certificate from PA and imported it locally. From the decryption log, I saw many errors with various URLs.Can anyone help explain how to eliminate this? error eq 'Received fatal alert CertificateUnknown from cl...

palo alto pa220 pan os 8.1.5

Hi I bought second hand a palo alto pa220, it is new, never had a license but it has a very old pan os, version 8.1.5, is it possible to upgrade it to a newer pan os? i would like it very much

Panorama DLP Log error

Hello, I am testing it internally with a DLP PoC request from a customer. It was difficult because the conditions were not good, but I was able to activate DLP and check the log in Panorama. However, when I try to check the DLP report in Data Log, the following error occurs. Why does the error log below occur? - error log : No report ID availa...

[#20240701-0110] - anti-virus and threat detection within websocket connections

Hi, I just came across an interesting question regarding websocket connections running through an NGFW. How does virus inspection and threat detection work here? From what I know websocket connections aren't compatible with normal HTTP connections (ignoring wss for the moment which might be a different problem). So is an NGFW still able to sca...

Connection drops during peak hours

Issue was ISP. They fixed it.

"Let's Encrypt" and geoblocking issues

Hi, we have a couple 3rd-party applications that use Let's Encrypt for certificate automation. We also use geoblocking rules on our Palo Alto firewall because we are local government, so we block non-US based traffic. I recently learned that Let's Encrypt requires global access due to its nature of validation, because our certificates are failin...

Plugins are not supported on this platform

Configuring a pair of PA-3410 and a couple of PA-415 firewalls. I've just noticed that I can't install the OpenConfig plugin on the P-415 firewalls. Refreshing the plugins yields this message: "Plugins are not supported on this platform". Until now I wasn't aware of this limitation and can't find anything about this in any documentation. Does an...

how to activate pa440 license to license management portal using admin credentils

Hi Team, please help me out,I have a new firewall PA440 Configuration that has been done, but wanted to activate the license to the license management portal how to do this please help me step by step....

traffic log did not display user information

The customer uses GP to dial in and adopts LDAP authentication method.After the customer dialed in normally, they accessed internal resources, but the source user colums in the traffic log did not display user information, which was normal before. The customer did not make any other changes, and the user id in the area was also checked.How to in...