Thanks emr, I found indeed the answer here : https://live.paloaltonetworks.com/docs/DOC-1528 ... View more

Yes indeed I was looking into the traffic logs. There is no url filtering on this box. Can someone of PA confirm that this is only working url filtering logs ? ... View more

I still didn't manage to get this working in our lab infra : admin@lab01(active)> show system setting ctd state Notify user for APP block     : no Alternative AHO               : no Skip CTD                      : no Parse x-forwarded-for         : yes Strip x-fwd-for               : no Bloom Filter                  : yes HTTP Proxy Use Transaction    : yes Enable Regex Statistics       : no URL Category Query Timeout    : 5 Bypass when exceeds queue limit: yes packets queued for packet capture: 5 whether to do packet capture after: yes max. loop for packets processing: 1024 Not to Block HTTP Range request: yes CTD ID                        : 1 CTD Allocator Usage           : 92%(44 MB) AHO Allocator Usage           : 87%(97 MB) Packet capture of a GET request: GET http://www.microsoft.com/ HTTP/1.1 Host: www.microsoft.com Pragma: no-cache Cache-Control: no-cache X-Forwarded-For: 10.255.224.130 Proxy-Connection: Keep-Alive X-BlueCoat-Via: 36967894f0722148 I have also enabled user-id on the incoming zone. That should be all to get thos working according to the DOC. What else could be wrong ? ... View more

anyone ? ... View more

Seeing this error as well since a long time on some panorama deployements My experience is that this is caused by ESX resource issues ( probably slow disk access) However, to be confirmed by your TAC. ... View more