General Topics

userID agent not connecting

5220(9.0.11) firewall connectes normally to local DC running userid agent, but I see this for a remote DC which also has the agent installed. The same remote DC is connected successfully to 850(9.0.11) firewall on remote site.  Not sure what the issu

Config Audit

Hi Everyone - I wanted to pose this question to the folks out there that may be feeling the same as I do about the way the config audit feature works. It is supposed to be a simple way to do a diff on config changes/deletes. I have found that palo se

combine more than two port for internet connections

Hi 

I wish to understand how combining  more than two ports for internet connections works. I have configure four ports for internet connections with deferent speed. 

when I perform a seed test. I think, some result base one companying all port seed -

MineMeld - Memory Leak or Redis needing configured?

Build: Followed the Azure 16.04 LTM instructions

Problem: Every 3-4 days after increasing to 4 CPU's and 16 GB Memory the memory seems to creep up to the point of borking the instance.

WorkAround: Every 3 days restart the engine.

Context: Curre

Shadow Rule Warning after upgrade

Hi All, 

We have a customer who has upgraded to 9.0 and they get shadow rule warnings since the upgrade.

All the shadowing rules are more generic with any/any for source and destination, but with source user restrictions.

The shadowed rules have more

Saml IDP certificate.

Hi Team,

We need to integrate Saml With Global Protect .We have done the saml configuration in azure perfectly fine.We have exported the metadata file from azure and inported in PA NGFW successfully.We need to achieve through IDP certifcate but the i

Global protect client stuck on connecting

Hi All - Global protect client for a few users is stuck on connecting state, is anyone able to help me look into

P 865-T24627 Mar 05 07:15:48:180208 Info ( 495): Server is trusted ***.gpcloudservice.com(0.0.0.0)
P 865-T19203 Mar 05 07:15:48:445236 Inf

WildFire Analysis Exclusions? smbv3

Seeing a lot of false positives with WildFire for application ms-ds-smbv3, specifically for PE+MSDOCX files. Is there anyway to just exclude ONLY this application from our Wildfire? I'd really hate to have to create a 2nd WildFire Security Profile an