<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic PA3050 Install in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/pa3050-install/m-p/40329#M29596</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Install of a PA3050 from Cisco ASA. Getting data transfer errors and mail in a degraded state. Some mail is getting deferred from the mx servers. Some tcp syns are not being acknowledged correctly. Anyone see these same type of issues after a PAN 3050 install. Nat in place for external mail servers.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 09 Jan 2014 22:42:40 GMT</pubDate>
    <dc:creator>nwhitehead</dc:creator>
    <dc:date>2014-01-09T22:42:40Z</dc:date>
    <item>
      <title>PA3050 Install</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pa3050-install/m-p/40329#M29596</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Install of a PA3050 from Cisco ASA. Getting data transfer errors and mail in a degraded state. Some mail is getting deferred from the mx servers. Some tcp syns are not being acknowledged correctly. Anyone see these same type of issues after a PAN 3050 install. Nat in place for external mail servers.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 09 Jan 2014 22:42:40 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pa3050-install/m-p/40329#M29596</guid>
      <dc:creator>nwhitehead</dc:creator>
      <dc:date>2014-01-09T22:42:40Z</dc:date>
    </item>
    <item>
      <title>Re: PA3050 Install</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/pa3050-install/m-p/40330#M29597</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello Sir,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Could you please let me know, if only mail traffic is effected or all traffic through this firewall &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;geting&lt;/SPAN&gt; &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;effected&lt;/SPAN&gt;...? &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;1. Is there any possibility for asymmetrical routing through this PAN firewall...?&lt;/P&gt;&lt;P&gt;2. What is the Data-place usages &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;( &lt;/SPAN&gt;CPU %)...?&lt;/P&gt;&lt;P&gt;3. What is the packet rate....?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You can try with below mentioned 2 CLI command and try, if helps &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;tp&lt;/SPAN&gt; recover the situation.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;# set &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;deviceconfig&lt;/SPAN&gt; setting &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;tcp&lt;/SPAN&gt; asymmetric-path bypass&lt;/P&gt;&lt;P&gt;# set &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;deviceconfig&lt;/SPAN&gt; setting session &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;tcp&lt;/SPAN&gt;-reject-non-&lt;SPAN class="GINGER_SOFTWARE_mark"&gt;syn&lt;/SPAN&gt; no&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Suggest you to adjust &lt;SPAN class="GINGER_SOFTWARE_mark"&gt;TCP MSS&lt;/SPAN&gt; on ingress and egress interface of mail traffic.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;IMG alt="TCP-mss.JPG.jpg" class="jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/10874_TCP-mss.JPG.jpg" style="width: 620px; height: 374px;" /&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 13 Jan 2014 05:53:47 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/pa3050-install/m-p/40330#M29597</guid>
      <dc:creator>HULK</dc:creator>
      <dc:date>2014-01-13T05:53:47Z</dc:date>
    </item>
  </channel>
</rss>

