About MPI-AE

Hey guys, Can someone tell me how exactly the Palo Alto firewalls, especially the PA-3020, process traffic? Is that done via Software/CPU or via hardware? I mean, if it's done via Software, the palo alto firewalls are just workstations with a linux os and network cards, aren't they? Sometimes I observe that the latency in the network rises. That is when large files are copied to the fileserver with 1Gbit/s. (That's the speed of the interfaces of the Palo Alto, full speed so to say). That traffic is routed over the pa-3020 (8.0.7) since there are different vlans. (client in another vlan than the fileserver). Besides, the management and data plane cpu utilization rise, too.   ... View more

Hey guys, we need to renewal our licenses and I'm thinking if I should renew the wildfire subscription. The problem is that we are not allowed to upload data to the public cloud (because of data privacy reasons) So we actually don't really use wildfire fully. What do you think? Is it worth to do the renewal under that circumstances? ... View more

Hey guys, When I want to do a video call with Signal messenger, I need to add two rules:   Rule1: App: Signal Service: application default   Rule2: App: STUN Service: any   Signal accesses random destination ips on random ports.   Skype and Google Hangouts need those rules:   App: Skype, Google-Hangouts Service: application default   App: rtp Service: application default   App: rtcp Service: application default   As a result I had to add those 3 rules for all 3 apps to work:   App: rtp Service: application default   App: rtcp Service: application default   App: STUN Service: any   Do you experience the same? ... View more

Hey guys, There are two 3020s in HA that run 8.0.7 I'm wondering if I can upgrade to a new version in 8.1.X train? Or should I stay at 8.0.7?   Can someone share their experiences?   Thank you. ... View more