General Topics

Resolved! Too many open files error in engine log

Hi,

As of yesterday morning I'm getting an error in my MineMeld engine log that is indicating too many open files. Also, some of my input and output miners are not updating (they show 0 entries even though there are indicators in the input table in

Resolved! M-100 service routes

Hello, 

can I setup service routes for M-100 other than the mangemnet Interface? 

I want to use Eth1 or Eth2 instead of the Management Interface.

Please advise.

Thank you

Resolved! ARP not advertising for NAT translation

Hello,

We have BGP routing on WAN interface with WAN IP and an additional subnet ip address which is advertised by the firewall to the ISP. When we create a NAT translation from a private IP address to a public IP address from this additional subnet

Resolved! Application specific and port any

Hello Experts

Is it OK to to put application specific and port any in the security policy, specially if ports are dynamic like SQL DB?

Regards,

GR

Resolved! Pushing CLI commands from Panorama?

Hello Experts

I would like to create firewall rules from script to generate CLI commands. How to push these commands from Panorama to firewalls?

Regards,

GR

Resolved! IPSec and Panorama with Satellite sites

Hello, 

I'm in the process of preparing two PA200s for our satelite sites. We are using Panorama to configure all of our firewalls and I'm trying to keep all my configs in the templates but am torn when it comes to the VPN configuration. 

My main co

Resolved! Grouping security policies

Hello Experts

Can  we group the security policies like all AD related rules in one group. This functionality is there in Juniper NSM and checkpoint. I am wondering how I can achieve this in PA. May be through tags?

Resolved! Naming convention for security policies and address objects/services

Hello Experts

Could anyone suggest the best way to name security policies as per their experience?

Regards,

GR

Resolved! Session Lookup for inter-virtual communication

Hello Experts

I was just wondering how firewall session is created for inter-vr communication. I have scenario like this:

Interface eth1/1 (Trust-VR) Trust Zone ---LAN (10.10.10.0/24)

Interface eth1/2 (Untrust-VR) Untrust Zone ---INTERNET

In Trust-VR,

Resolved! Asymmetric Routing and TCP syn check based on interface or zone?

Hello 

I have scenario like firewall is connected to two routers R1 and R2 through eth1/1 and eth1/2 interfaces respectively. From firewall, traffic is going through R1 via eth1/1 interface and return traffic is coming through R2 via eth1/2.

This is