Generated traffic logs showing weird information

I have a VM-500 panos-8.1.18. I am seeing traffic logs with below flags

Session End Reason- policy-deny (means traffic denied as per policy)

Action -Allow ( how can action be allowed when traffic is denied via policy)

Type- deny

We also have ssl decrypt

Configure secrets/psk with Ansible 'panos_type_cmd'

Hi,

When using paloaltonetworks.panos collection - module 'panos_type_cmd' is there any way to set secrets or psk without using the real password?

Configuring via plaintext password works fine and then when viewing the xml config the passwords are st

How do I set bgp auth-profile secret in XML?

Can we use SFP+ with PA-820?

Hi, Guys. I plan to use the PA-820.
The PA-820 has only two HA ports.
I am planning to substitute the HA ports with SFP ports.
Can I use the PAN-SFP-PLUS-CU-5M with the PA-820?
The PAN-SFP-PLUS-CU-5M is cheaper than the PAN-SFP-CG, so I would like to use

Palo Alto IPV6 configuration for firewalls running in active-active HA

Hello All,

We have a customer planning to enable IPV6 firewalling in their current  data center firewalls. The firewalls are currently running in active-active HA mode. I have the below queries.

1. When I configure IPV6 address on the interfaces, is

antivirus not able to update

we have recently renew our license of thread prevention . As application and threats are update but the antivirus is not update from Palo alto server. We  downloads the AV from support portal and manually install in FW  and run this command still ant

Properly routing IPv6 across site-to-site IPSEC tunnel

Configuration:

I have two /56 IPv6 prefixes, one which is used in our Bay Area office, and one which is unused. I have taken a /64 from the unused /56 prefix and assigned it for use by our office in The Netherlands. They will use DHCP to assign the a

GlobalProtect unattended uninstall when "Allow uninstall with password" is set

Hello everyone,

I am fairly new to PaloAlto and currently we try to package the GlobalProtect App for Software Deployment

Documentation on installation was found ad https://docs.paloaltonetworks.com/content/techdocs/en_US/globalprotect/10-0/globalprote

URL with port

Hi, 

Wondering if someone can help me out. I've done some searching and have not come up with with much

I have a user who needs to access a few webpages on a custom port. The link for example is something like: https://custom1.config.fake:2546/info bu

Re: Welcome to LIVEcommunity! Start Here.

Can someone help me? How we can know if HP brand SFP is compatible with PA-3220 firewall

JD094B     Single Mode HP 10G_BASE_LR_SFP    

JD092B     HP Multimode 10G SFP+ LC   SR Transceiver

Adding URLs to an allow category caused some connections to be blocked

We added additional URLs to an existing custom url category and on our URL filtering profile, it is set to alert. These additional URLs are completely unrelated to the connection that started to fail. And as soon as we reverted those changes things b