How PaloAlto App ID detects application traffic in encrypted traffic apart from web browsing

Hello Team,

i want to understand How PaloAlto App ID detects application traffic in encrypted traffic apart from web browsing
i know its going take application information from SNI through TLS (this is for websites -having SSL) but i want to understan

Palo alto redundancy

Other that putting a palo alto in an HA pair are there any other ways to add redundancy?

FW Recommendation version

Kindly note that we found the below vulnerabilities in our boxes .

Model                                  PA-5020

Software Version            8.1.20

what is the recommended version and upgrade path .

EOL/Obsolete Operating System: Palo Alto Netw

Panorama fragmentation

Hi,
If the checkbox for Fragmented traffic is uncheck, does that mean that the fw will not discard fragmented traffic? 

I have a case where someone says "10.154.74.0/23: We can not send from, or send to,  packages bigger than 1472. All ports are de

Interface Monitoring

We have total 3 Interface ,  two ISP interface ( In router we have made them to act as Primary and Secondary) and one trust interface , now the confusion is I am trying to make if both ISP interface goes down , I need to make my trust interface also

Proxy based IPSec tunnel is up but data traffic is not passing thorugh

Hi all,

I have some issue regarding ipsec tunnel at Palo alto, IPSec tunnel is up and running well before. Suddenly, data traffic is not working without any changes. When i reinitiate tunnel at PA side, it is working fine. it happens frequently, i'm

Asset not selected

Asset not selected when i want to create a case

New VPN effects on existing VPNs

I am very new to Palo Alto administration, having been a Checkpoint guy at my previous job. At my new job I am tasked with creating a new IPsec site to site VPN with a vendor on our perimeter firewall. There are already several other VPNs running. My

URL Encording issue

I am using URL Block Page.
However, there is a part where the & part appears as %26 in a specific URL.

ex. I entered abc.d/&uid=B5C61D407 in the browser, but it appears as URL:abc.d/%26uid=B5C61D407 in the block page. Why is this and what can be done

block non decrypt traffic

Hello, I need to know how to block traffic that is not going through decrypt.