TCP Reset being dropped at firewall

I have a client accessing a Citrix CAG via a firewall at one site on HTTP that I see traversing the FW, exist out towards the internal PA firewall reaches its destination.  The destination server is sending a TCP RST, we are told to redirect the br

Minemeld with FIPS enabled

Has anyone successfully gotten Minemeld to work when the PAN is in FIPS mode?  Getting an error when following the steps listed in a previous article. "Import of GoDaddy2 failed. Unsupported digest or keys used in FIPS-CC mode"

https://live.paloalt

Internal host detection not Working

I have an external Gateway and I wish to setup always-on except when on local LAN. As a test i am doing this on my own username but it seems to always want to connect to external GW regardless of my settings.

I have turned on Internal Host detection

LDAP authentication does not work for Global Protect Clients

Hello,

User-Mapping Server Monitoring

Hi All,

Wanted to know the Best Practice for the User-Mapping with Server Monitoring, we have a few Firewall Sites which utilize the server monitoring feature whereas the vast majority others do not and use only windows User-ID agents for probing and

Dear Palo Alto Networks:

Path monitored static route not removed from BGP RIB out table when path monitor dest. IP unreachable.

Hi,

I have an issue where a Static route that is being path monitored and redistributed into BGP, is not removed from the BGP RIB out table when the monitored path is unreachable. The static route is still populated in the Palo Alto BGP rib out table

getting traffic after the interface is down

Hey guys hope you doing well I got a question I get a challenge one of my user getting traffic logs of NetBIOS by source Pvt IP from LAN to WAN the device from the source side is down the 2 Pvt IP still hitting the cleanup rule. The Policy is denied

Disable new apps in content update

Hi Experts,

We've a pair of firewalls (9.1.6) managed by the Panorama (9.1.6). We've Threat prevention license in place and client would like to install just the threats and not the apps by selecting disable the new apps in content update.

As recommen

TAC support has gone missing, again :-(

Opened a S2 TAC case @7pm ET 07/21/2021.  The SLA response time is 2 hours.  TAC didn't get back to me until 5:43am ET 07/22/2021.  The response from TAC is very vanilla, not helpful at all.

Call back to TAC this morning has been waiting for an hour