Secure API access for onPrem Applications

What kind of ways there are available to secure API access?

For the UI we can implement MFA to have more security here.

As both services run on the same port, using IP/Port protection on the firewall is not useful.

What ideas do you have to secure

Possible leap year syslog bug

An initial ask to see if anyone else has seen the same - last night at 23:59:58.000 we received our last syslog message from a stack of PAN-OS firewalls under management, on versions 10.1 and 10.2. Doesn't seem to be an issue with our logging server

Warnings in certificate.

Hello team:
From your support; by browser I get the following warnings "NET::ERR_CERT_COMMON_NAME_INVALID" subsequently ERR_SSL_KEY_USAGE_INCOMPATIBLE, this validating in chrome and microsoft edge. Consequently I do not login to the portal, but it is

Monitoring "Panorama Connected" over SNMP is always connected

Hi there

We would like to monitor the status of "Panorama Connected" of a PA-440.

I found the the correct SNMP Get OID for this case.

But when we enter a wrong Panorama IP, the OID String is still "connected":

27.02.2024 10:32:36 (7 ms) : Device:

Decryption: Received fatal alert CertificateUnknown from client

Hi Folks, 

I'm seeing some instances of "Received fatal alert CertificateUnknown from client" errors in the decryption log when the root\issuer certs are clearly in the FW's cert store. Attached are screenshots of the error and the FW's cert store.

HA traffic failover not wotking.

This is my HA configuration, PC 1 is 10.0.0.10 and PC2 is 30.0.0.15, I have configured HA active-passive.
HA is formed between Both Palo Alto but Failover is not working.

When I do failover the Passive becomes active however it is not responding for t

SSL & GTP inspection capability

Hi,
I'm currently working with a Palo Alto 7080 firewall equipped with a 100G Network Processing Card (NPC), and I'm looking for some insights into its throughput capabilities, particularly when conducting SSL decryption and GTP inspection.
Specificall

PA 440 just stopped working

I have a 2 PA 440 os 10.2.7 at two completely different locations and suddenly stopped working. I don't see any advisories out, anyone else seeing this recently