Thank you for participating in this AMA event! Join us again tomorrow, April 8 to see all the answers from our experts on protecting your business! And you can ask additional questions from 10am-12pm PT.
It’s finally here! Happening TODAY at 10AM PDT - the first LIVEcommunity Ask Me Anything (AMA) Q&A event all about professional services. Join us, ask questions and learn about how professional services can help your customers in different stages of deployment of our products!
Please be sure to click Like if a post is helpful to you and to "Accept as Solution" to let everyone know that the answer to your question hits the mark!
What are the different offerings for the PS Extended Expertise Program?
There are several options in the Extended Expertise program to provide flexibility for our customers, they are:
Each of the above base offerings will support one “core expertise” designed to identify and provide the right Consultant to support your primary objective, they are:
I have question below on Pre tunnel and Post Tunnel
We are running 8.1.15 on GP 5.2.5
We see below in GP logs
'Pre-tunnel latency: 18ms, Post-tunnel latency: 1ms' )
We have pre logon then on demand.
So when I power up my pc and I see Global protect is connected.
which latency is this?
After this when I logon to PC with username and password then
prelogon gets disconnected.
Then I click on GP icon and click on connect then after my SAML MFA. I get connected to GP.
So please answer below
1>which is tunnel latency?
when GP. prelogon is connected or when I click on connect on
GP icon ?
2>Which is pre tunnel latency in above case?
3>which is post tunnel latency and why it less than pre tunnel?
This was first introduced with GlobalProtect 5.1 and PAN-OS 9.1, this is the latency measured from the client to the gateway.
It looks like you are running PAN-OS 8.1.15, so please be aware that this may not work as advertised until you are running PAN-OS 9.1 and GP 5.1 or above.
The way I understand it is that Pre-tunnel latency measures from the client to the portal page, and Post-tunnel measures from the client to the gateway. This is all telemetry data collected from the client.
Because there can be many paths between the 2 on the internet, there is a possibility that the Pre-tunnel can actually be higher than the Post-tunnel. Most of the time the Pre-tunnel would be a lower number, but it can be the opposite.
On our TechPubs site, there is a small explanation there along with a screenshot, with the different latency examples shown here:
Going forward, if you or anyone else has any similar questions, please be sure to ask and GlobalProtect questions in the dedicated GlobalProtect discussion area here:
Otherwise any other General question can be posted in the General Topics area here:
Hi,Is the PS Extended Expertise Consultant remote or on-site?
How do we engage PS via our Palo Alto Vendor or through Palo Alto SE?
We offer Dedicated and Designated consultants under the Extended Expertise service offering. The Designated is only offered in a remote capacity. Dedicated is offered remote or on-site. Specifically:
To engage PS, Please reach out to your Palo Alto Networks or Partner Account Manager
Hi PS team,
How do I find a partner in my region who can deliver Professional Services?
Great question Tanya! Please view our CPSP Listing Page: https://www.paloaltonetworks.com/services/cpsp-partners
Also be sure to check in at our program alias to ask about others not listed here. Our partners are continuously in flight towards completion of workshops and credentials to increase their capability to serve our customers, updated posting to the page takes respective cycles.
Is the Extended Expertise Consultant remote or on-site?
This will depend on the Extended Expertise service that is procured:
Need to when we reboot firewall do url cache database is also deleted every time?
If yes why is this behavior?
Can I check where url cache is stored in firewall from cli?
It depends on which cache you are talking about, because there are 2 URL caches. One on MP(Management Plane) and one on DP(Data Plane). The cache on the DP is cleared at each FW reboot, by design. The cache on MP is saved every 8 hrs or before a regular reboot or when the DB version is upgraded.
You can clear the cache from DP and MP using CLI, but if you’d like to check details on URL filtering sites or categorizations, that can be done here: https://urlfiltering.paloaltonetworks.com/.
Going forward, if you or anyone else has any similar technical questions, please be sure to ask in the General Topics area here:
My question/statement is about enabling better transparency between PS and CPSP partners.
How comfortable is the PS Mgmt team within PANW in providing access to PS related tools/scripts for CPSP partners to help keep consistent deployment techniques, and also... how soon we can seen more progress to in achieving transparency. (Too often I hear, "we will take that under advisement" or "we will bring that under internal discussion", without an actionable item/resolution offered) .
Great question and happy to support this inquiry - As part of the CPSP program membership, we make great strides and take pride in providing our elite, certified partner engineers/consultants with the same level of training and transparency that we provide our own teams. In fact, our partner program hosts the framework for all post sales delivery training, so you are the primary audience for consuming that content firsthand, along with our internal PS bench. Further, we are recalibrating our PS Delivery Library with a new design and content refresh, in collaboration with our Global Practice Leads and their Global SA's, in the form of tools/scripts/blueprints/architectural references, SOW's etc. These are specifically for supporting consistency in your implementation methods and is a value tenet to the program, and commitment of our PS overarching org.
Our executives definitely sponsor this PS program transparency to the eligible CPSP partner orgs/individuals that have: earned their credentials,invested in training, submitted detailed project data, and provided customer sat results.
Thanks Steve for reaching out! This has been a concentrated effort that we have listened to this audience requests, and we have been working diligently on both correcting the perception with our partners, and making sure we are communicating out those deliverables and training modules regularly. Let's be sure you get connected with Rob Pfrogner on my team to give you a tour of what's available to you today - @rpfrogner thanks for the assist!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!