LDAPS Falling back to LDAP

Our firewalls are configured for LDAPS on port 636 to our Windows DC. We have the require SSL/TLS option checked in the LDAP settings window. The useridd log shows:

2022-03-22 14:42:09.136 -0700 connecting to ldap://[dcserver]:636 with StartTLS...
202

Device Certificate Issue

Hi Team,

We are facing an issue with the device certificate. I have generated that OTP in the CSP portal and imported it into the firewall after I am facing the below issue

"Failed to fetch device certificate. Failed to send a request to the CSP serv

Adding ping/icmp as a service, or configure "Application Default" under service

Simple question: Can a service for icmp/ping be created, or should I just configure "Application Default" under Service? We have ping/icmp defined under Application, but we also have specific services configured also and ping will not work, falls to

MineMeld behind proxy server - Using docker

I am trying to use a proxy for MineMeld Internet connectivity, and I have assigned proxy settings to the container instance. For some reason, it is not working and I probably need to especifically set proxy settings in the MineMeld application, but I

XFF IPs Not showing in the Traffic logs for HTTPS Traffic

Hi,

I am unable to see the XFF IPs for the HTTPS traffic in the traffic logs. 

We already implemented the Decryption but still we are unable to see in the traffic logs. 

Any suggestions. 

version 10.2.0 upgrade issue

Dear Support crew,

we have two PAN-3220. Our devices are HA. We received advanced evaluation package licenses for the devices, but my device operating system was 10.0.3 so the advanced licenses are only installed on PANOS 10.2.0.
According to the relea

PALO ALto 820 Mounting Arrangements / Mechanial drawings

Hello, I am looking for mechanical drawings for the PALO ALTO 800 (820) Series FW, including dimensions, locations and distance between the screws, screw sizes etc. The images in the installation guide do not contain this information. Cheers

Not able to view threat log on both GUI and CLI of the firewall

Hi Folks,

We have PA-220 running on PAN-OS 10.0.6. Upon checking the Threat logs via GUI no threat logs are visible . So we had checked on the CLI of the firewall for any threat logs but no luck.

The firewall have all the required licenses. 13 percen

Clientless VPN getting worse with each PANOS ver

Timeline of my struggles:

Somewhere between 10.1.0 and 10.1.4 the clientless VPN stopped showing icons for each app not super big deal because the apps still worked but after trying a couple upgrades...

10.1.5: brings the icons back! but now the apps

Value from SNMP polling sometimes 0

Hello,

I have small issue with snmp.

We're monitoring PA's interfaces via SNMP.

Sometimes values are 0, so it causes 100% of interface usage.

Similarly, when I use cmd "show counter rate eth~", sometimes it shows 0.

It happens when I execute cmd before

enable rules for MS Teams

Hello to everyone! This is my first topic))

Gents, need your help to enable MS Teams for user w/o internet access.

Need for users w/o authentication could start video conference in teams.

I added teams.microsoft.com to enabled address, also created MS