topic Re: telnet with EBCDIC encoding in General Topics

telnet with EBCDIC encoding

oshcomp — Thu, 15 Aug 2013 18:36:04 GMT

We are having some issues with IBM telnet (tn3270) through a PA-200. The telnet sessions are very sluggish. I had to remove the firewall to restore performance. The telnet is using EBCDIC encoding. I had been specifying a security policy using the application telnet. When I get a chance I will change that to service port 23 and test again. Hopefully performance will improve if the application is not being analyzed. I don't know how PA handles EBCDIC. Has anyone else had issue with IBM telnet?

Thanks

Re: telnet with EBCDIC encoding

sraghunandan — Thu, 15 Aug 2013 18:50:36 GMT

Can you try using app-override to see if it improves performance https://live.paloaltonetworks.com/docs/DOC-2816

Re: telnet with EBCDIC encoding

oshcomp — Thu, 15 Aug 2013 19:30:26 GMT

Good suggestion. I will give that a try.

Re: telnet with EBCDIC encoding

mbutt — Thu, 15 Aug 2013 22:44:37 GMT

Like suggested by sraghunandan you should definitely try app override.Below is what happens when you do app override

Issue

The Palo Alto Networks device is classifying traffic as "Unknown-TCP" or "Unknown-UDP".
A custom application override is created and applied to a rule to re-categorize the traffic.
The traffic is now properly identified but there is no URL filtering applied to the traffic falling under that rule.

Resolution

This is normal behavior. A rule with a custom application override does not pass through any of the URL, threat or anti-virus scanning engines. The scanning engine will be used with an app-override if you use an existing built-in application such as web-browsing.

https://live.paloaltonetworks.com/docs/DOC-1343

Let us know if this helps. Thanks

Re: telnet with EBCDIC encoding

mikand — Mon, 19 Aug 2013 07:51:04 GMT

Being "sluggish" sounds more like a routing issue or mismatched speed/duplex for one or more interfaces of your PA (which results in retransmits, lost packets etc).

Re: telnet with EBCDIC encoding

PanIst — Mon, 19 Aug 2013 07:56:15 GMT

did you try app override yet ?

topic Re: telnet with EBCDIC encoding in General Topics

telnet with EBCDIC encoding

Re: telnet with EBCDIC encoding

Re: telnet with EBCDIC encoding

Re: telnet with EBCDIC encoding

Issue

Resolution

See also

https://live.paloaltonetworks.com/docs/DOC-1343

Re: telnet with EBCDIC encoding

Re: telnet with EBCDIC encoding