Is it ok to set ipsec phase 1 lifetime 24 hours when the peer set it to 86400 secs?

Hello

I made ipsec tunnel between paloalto and fortigate.

I keep have issue about rekeying, so I try to set different lifetime phase 1 and 2.

phase 1 : 28800 -> 86400

phase 2 : 28800 -> 28800

In paloalto I can't set 86400 sec, so I plan to set it 24 hou

MM_CONFIG_DIR and side-loading of credentials

Is the MM_CONFIG_DIR pre-set?   I used my admittedly limited Ubuntu knowledge to check inside the engine process and it doesn't appear to be there.    I see the variable used in many/all miners for storage of password and client certificates.

os.e

Minemeld TAXII ISAC

Hi all,

I have the way to get feeds from ISAC with a TAXII prototype and I want to share with you all. Proabably it can help someone.

Firstly it's necessary to import the minemeld-taxii-ng extension on system>extensions and install extension from git

Developing my first Extension: MineMeld Server now reports ERROR RETRIEVING EXTENSIONS LIST

I worked on my first extension today (based on the structure and files of youtube-miner).

As soon as I imported it into MineMeld I got the ERROR RETRIEVING EXTENSIONS LIST: INTERNAL SERVER ERROR red box of shame.   

What log should I be looking i

Why do i need to link a VR to a Vsys?

Hi all,

I'm using a PA-3020 device configured with multiple Vsys and when creating a Vsys I have the ability to assign a specific VR.

From my understanding, the connection between a Vsys to a VR is based on the Vsys connected interfaces to the VR much

Creating Minemeld IPv4 Lists

I'm a newbie with Minemeld and Autofocus.

I'm looking to create a Minemeld Miner that will maintain IPv4 Whitelist based on an AWS Site that is load balancing and/or using DNS Round Robin.

The CDN that we're pulling data from lives in AWS and IP Addre

Hardware failure recovery in an HA pair

What is the best way to recover the primary PA 5050 if the hardware completely dies?

Can we create same VLAN ID on two different aggregate interface on the same vsys enabled device ?

Hello All,

I want to assgin same vlan id two different aggregate interface which will be assign to different vsys created on the 5220 device and assgin public IP address as well which are in same subnet.  The exact requirement is below :-

created tw

Email Alert Formatting - PanOS 8.0

I'm looking to make my email alerts more readable, especially for certain cases where rapid response is key. I have log forwarding configured and all, but the defaults contain way too much information. If possible I'd like to add some custom verbage,