About MattRathbun

Thank you very much for the info and the link!!!!!  This answers the question.  In addition to subscribing, I added the RSS feed to our teams infrastructure and we are all receiving notifications.   ... View more

I left the email notifications on, partly because I wanted to see how big of a problem it was going to be, and also so I had some good data for a support call.  I received one notification at 7:09am (Central) from one firewall and have received none since yesterday at 8:00p.  I am not sure if something changed on Palo's side, but I agree that the alerts have pretty much stopped in the last 12 hours or so.  ... View more

Ours is set to alert.  I can see it in the URL log and all looks good there.  ... View more

We have been seeing this intermittently across all our firewalls for the past month or so.  Occasionally, we see a lot more of these errors than normal and this past weekend was particularly bad.  We changed the update URL to one we found in another post and it doesn't seem like it makes a difference so we changed it back. This is affecting our 220, 820 and 3220 models (running 9.0.6)   My guess is that whatever update source Palo is using is either busy or having problems. It is definitely a transient issue and other than email/alert nags, we also seem to get an update at the next attempt. But the last few months have certainly been worse!   ... View more

I recently had an issue where I could see my AD groups and apply them to policies.. but it seemed like the users were not being enumerated and consequently the policy was not being applied. It turned out to be a domain name mismatch.    My AD groups as appearing in policy looked like this:  domain\user But my users were being enumerated as: domain.local\user   I ended having to change the remove the ".local" domain suffix in the user ID group mapping setting.  Once that happened, the policies started to apply to the group members themselves. Not sure if this is what you are seeing, but a place to check!   Device > User Identification > Group Mapping Setting  ... View more