About CMocanu

I just checked and has reappear the error messages after some time also on my PA. ... View more

Hi @cverniani , All the pictures from my reply are screen snip from my PA config. Can you be more specific about what screenshot are you referring?   ... View more

Hello, For a period of time, the solution proposed by @dcaporetto worked also for me, but starting with one month ago I start having problems with Anydesk clients. After investigation, the following solution work for my PA: Imported into my PA the AnyNet Root CA certificate and marked as Trusted Root CA (a big thank you to @dcaporetto for the certificate) Create a service object for TCP 80 and 6568 Create a custom URL list for:  anynet%20relay/ anynet%20relay:80/ anynet%20relay:6568/ anynet relay:6568/ anynet relay:80/ anynet relay/ Create a decryption profile with "Block sessions with expired certificates" and "Block sessions with untrusted issuers" checked on No Decryption tab Create a decryption policy with action of NO-DECRYPT using custom URL categories and services configured above as match criteria and action of NO-DECRYPT   ... View more

Please let us know the TAC case resolution on this issue.   My workaround about this issue is based on https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000001Uc6CAE  First I checked if DNS security subscription on my firewall is valid. After I reset the local cache with command "clear dns-proxy dns-signature cache", the error message stop appearing in system logs and the local cache it's regenerated. ... View more