About Jack_Howells

Hi guys,   Configuring inbound SSL inspection on 7.1, decryption does not work with the newly supported cipher suites shown in the document below.   https://live.paloaltonetworks.com/t5/PAN-OS-7-1-Articles/PAN-OS-7-1-Supported-ciphers/ta-p/71969   Only the cipher suites shown in the document below again work. The document above states that ECDHE should work but it does not.      https://live.paloaltonetworks.com/t5/Management-Articles/SSL-Decryption-Not-Working-due-to-Unsupported-Cipher-Suites/ta-p/55543   Could anyone provide some advice for this situation?   Cheers   ... View more

Hi guys,   Seeing an error message show up in the System logs:   "Cloud is not ready, There was no update from the cloud in the last 630 minutes. 04/18 09:49:25"   I have connectivity to updates.paloaltonetworks.com, as the Palo is able to retrieve licenses and any updates, such as dynamic updates, and I am able to 'Check now' in the Software updates tab.    If I run 'tail follow yes mp-log ms.log' whilst checking for software updates I can see I'm successfully connecting to the update server.   "https://updates.paloaltonetworks.com/Updates/UpdateService2.asmx/CheckForSoftwareUpdate Resolving updates.paloaltonetworks.com... 199.167.52.141 Connecting to updates.paloaltonetworks.com|199.167.52.141|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 71877 (70K) [text/xml] Saving to: `/opt/pancfg/mgmt/global/upgradeinfo.xml.10009.tmp' 0K . 100% 245K=0.3s 2016-04-18 11:13:35 (245 KB/s) - `/opt/pancfg/mgmt/global/upgradeinfo.xml.10009.tmp' saved [71877/71877] 2016-04-18 11:13:36.782 +0100 No upload information available 2016-04-18 11:13:36.792 +0100 Error: pan_mgmt_get_sysd_string(pan_cfg_status_handler.c:367): failed to fetch cfg.platform.uuid 2016-04-18 11:13:37.417 +0100 No upload information available 2016-04-18 11:13:37.427 +0100 Error: pan_mgmt_get_sysd_string(pan_cfg_status_handler.c:367): failed to fetch cfg.platform.uuid"   I don't think there is much of an issue here, as I can reach the update server, but is it trying to reach something else? What could it be? Not much information on this elsewhere, so I'd like this to be online so people with the same issue can at least find something!   Thanks Jack     ... View more

Hi guys,   I've followed the documentation on how to generate a CSR (https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Generate-a-CSR-Certificate-Signing-Request-and-Import-the/ta-p/53593) but when importing the certificate I'm only able to select one option, as shown below.     Could you please help explain why they're greyed out?   Thanks   ... View more