About laurence64

Hi   I was wondering if anybody knew if the temporary disable SSL decryption is actually broken or it is my firewall, I needed to switch it off as I was having issues getting to sso.paloaltonetworks.com (which oddly is not covered by exclusion list) and found that even after running the command set system setting ssl-decrypt skip-ssl-decrypt yes, the traffic was still decrypted, I had to disable the rules and commit to stop the firewall from decrypting, I was hoping to avoid this as it is a PA-220 and takes an age to commit configs, if anybody has any ideas please let me know, I am currently running 10.1.12   Thanks in advance, ... View more

Hi   I have Advanced Wildfire in our Lab env and have noticed something very odd, when the firewall is submitting any files to Wildfire if they are returning "informational" they are blocked, if they are returning Malicious and "High" the action is allow, this has also been confirmed by the fact that the samples of Malware are being blocked by the Windows defender running on the test desktop.   I have configured decryption and allowed the forwarding of decrypted traffic ( I assume that the submissions would not show if this was not working correctly ) and have confirmed that the traffic is running across the defined rule and that rule has the Wildfire and Anti-virus profiles that are set to reset everything, this is very strange behavior and I am hoping that it is an omission in my configuration somewhere.   Additionally this does not seem to matter if the session is http or http2   Any help would be greatly received as this has me scratching my head at the moment.   Thank you in advance,   ... View more

Hi All   We are running pan-os 11 as a POC and have noticed that the "Review Policies" Link in applications and threats section does not appear to work, the review apps does and all new apps are correctly displayed but the Review Policies link from here also does not work. ... View more