topic Re: Ideas for new and/or updated KB articles in General Topics

Ideas for new and/or updated KB articles

ansharma — Sat, 20 May 2017 02:33:19 GMT

With the ever-growing plethora of features in Palo Alto Networks firewalls and Panorama, keeping up with the knowledge is vital. In the world of Network Security, there is very little room for the 'unaware' and 'unprepared'. At LIVE community, we are constantly adding up-to-date and relevant articles, which can not only make you aware of our NGFW features but might actually save your network from a hazard.

Using this platform, we'd like to know if you have any particular requests for KB articles, blogs, etc. Whether it's a configuration walkthrough, FAQ-type queries or commonly observed issues, we can try and create more content which benefit others too. If you came across an article which was outdated or inaccurate, we'd more than happy to update it to match the current versions and/or behavior.

However, I should emphasize that we cannot provide hard deadlines or assurances for every request.

If you have any requests or ideas, please mention them in the comments below.

Re: Ideas for new and/or updated KB articles

rodvand — Wed, 24 May 2017 05:30:29 GMT

Hi,

I would like to see more specific information about using a virtual firewall tailored to the various hypervisor platforms.

Re: Ideas for new and/or updated KB articles

ansharma — Wed, 24 May 2017 13:22:14 GMT

Hi Rodvand,

Have you taken a look at https://www.paloaltonetworks.com/documentation/71/virtualization/virtualization or this https://www.paloaltonetworks.com/products/secure-the-network/virtualized-next-generation-firewall/vm-series ?

What sort of specific information are you looking for?

Regards,
Anurag

Re: Ideas for new and/or updated KB articles

TranceforLife — Thu, 25 May 2017 11:11:50 GMT

Hiya,

Is it possible to get a description of the mp-log files, please:

admin@BAS-LAB-FW1-3050> tail follow yes lines 25 mp-log

agent appweb3-panmodule.log appweb3-sslvpn.log appweb3-websrvr.log appweb3-websrvr.log.old authd.log
avdata.log botnet.log chasd.log content_telemetry.log cord.log cryptod.log
curlog_out_content dagger.log dataplane-console-output.log devsrv.log devsrv.log.old dnsproxyd.log
dsms-certificates.log ehmon.log fips.log ha_agent.log hfa_3k.log ikemgr.log
indexgen.log indexgen.log.1 indexgen.log.2 keymgr.log l2ctrld.log logpurger.log
logpurger.log.old logrcvr.log masterd.log masterd_apps.log masterd_apps.log.old masterd_detail.log
masterd_detail.log.1 mgmt_fb.log mgmt_ngx_error.log mp-monitor.log mp-monitor.log.1 mp-monitor.log.2
mp-monitor.log.3 mp-monitor.log.4 ms.log ms.log.old nf_conntrack.log opcmdhistory.log
pan_dhcpd.log pan_logdb_schemagen.log pan_mgmt_firstboot.log paninstaller_content.log panlogs-partition.log parrot.log
pdtrc.log php.debug.log php.janitor.log pppoed.log rasmgr.log report_gen.log
routed.log satd.log snmpd.log sslmgr.log sslvpn_ngx_error.log sslvpn_ngx_error.log.old
stats_service.log sysd.log sysdagent.log sysdagent.log.old syslog-ng.log upgradelog_err_sig_av
useridd.log varrcvr.log vif.log wildfire-upload.log l3svc_ngx_error.log

admin@BAS-LAB-FW1-3050> tail follow yes lines 25 mp-log

So we can have a KB on all logs file meaning (some of them already have an intuitive names) and a short description of what is inside.

Thank you,

Myky

Re: Ideas for new and/or updated KB articles

BPry — Thu, 25 May 2017 14:13:35 GMT

@ansharma,

I think a bigger issue that most people run into is ensuring that the documentation that supplies information for older software releases actually indicates which software versions it works on. Some of the documentation that still holds relevant information was made with older versions in mind, and people get confused on whether or not they should still be following the guide.

Re: Ideas for new and/or updated KB articles

ansharma — Thu, 25 May 2017 16:38:39 GMT

@TranceforLife

Hey Myky,

That's a good idea. We can have a doc giving a brief overview of some of the common logs, covering which ones could be helpful in checking what sort of issues.

Regards,

Anurag

Re: Ideas for new and/or updated KB articles

ansharma — Thu, 25 May 2017 16:43:03 GMT

@BPry

That's a fair concern to have when following KB articles. I think they way we want to handle is to start updating the irrelevant/outdated ones. That way, any article anybody comes across should hold their relevance.

Do you happen to have any particular articles you came across which needed updating? Please mention them, so we can work on improving them.

Regards,

Anurag

Re: Ideas for new and/or updated KB articles

Remo — Fri, 26 May 2017 13:56:51 GMT

Hi @ansharma

Does this document still fully apply to 7.0/7.1 and also 8.0?

https://live.paloaltonetworks.com/t5/Tech-Note-Articles/High-Availability-Synchronization/ta-p/61190

Regards,

Remo

Re: Ideas for new and/or updated KB articles

rodvand — Sun, 28 May 2017 19:34:36 GMT

Hi,

I have looked into those resources and while educational they don't really cover very specific issues within each hypervisor.

Maybe a KB article listing the differences between the hypervisors? If a company has the option to use different hypervisors it would be nice to make an educated decision.

We experience that you can't get SNMP bandwidth information on Hyper-V, but it works on VMware. And the we know there are differences in throughput, but it's not documentated anywhere on Live (as I've found).