What is the performance improvements of PAN 6.0 on PA-4000 series? I'm looking to find out what type of improvement in commit times and other management related performances.
I work for a K12 with very limited bandwidth. I need to determine what the appid will be for to block video for the upcoming NCAA tourney.Does anyone know how this traffic will be classified? --I can't block all video streaming because our teachers use legit video in class....--Keith
Hi Guys,Just a small question.I'm going to build a small setup using a SRX-cluster with PA-200-cluster directly connected to it.My question: Are the interfaces on the passive pa-node fysically down when not in use? ( or is this configurable? )Why: I want to connect the reth-interfaces through the PA using v-wire to spare me more routing-config.T...
I'm having some problems getting our traffic engineering working with OSPF, and I think I've finally figured out what's happening. But I can't figure out how to stop it.I think the problem is coming from how the PAN firewalls are importing the external static routes into the area. Here is a "dumplsdb" snippet for one such network, 3 0.0.0.1 ...
Running into an issue with LDAP authentication. I'am able to successfully login via LDAP authentication when the username does not contain a space. However if the username contains a space (ie palo alto) the system logs show "User \'test\palo alto\' failed authentication. Reason: Authentication profile not found for the user From: x.x.x.x". I...
Is there a canonical list of IPv6 capabilities included in PAN-OS 6.0? I have a customer asking many pointed questions and it would be useful to have one to reference.Best,Corey
Hello. I have two PA 5050's in an HA active/passive pair. I will randomly - once a week get a message "SYSTEM ALERT : critical : HA Group 1 : Running configuration not synchronized after retries. If I check on the dashboard-HighAvailability - I see the config is not synchronized. If I wait a few seconds and refresh this status and the config...
Hi,We have a cluster PA (active/passive), and checking the logs we realised that PA passive is sending DNS connections to its DNS configure like secondary. Shouldnt do this connection only the active PA???? why the passive is doing this request DNS being the passive firewall???Thanks,Best regardsJesus C.
I currently setting up a PA 3020 for my DR site and currently have one set up for my Main site. I exported the configuration from my main PA and am using it to set up my DR PA. Is it possible to disable the VPN tunnels on the DR site so they will be there and not need to be configured if a cirsis happens but not interfer with the active working ...
How could I suppress the template setting only push by panorama on the PAN device.the PA is out of sync from my panorama and when I try to commit the result is failed.but I have some piece of config deployed on the PA. and I can't dellete this setting.Have you an idea?
Hi,Is there a way to upload Premium support license information to the device that has no internet on any interfaceThanks.
scenarioSite AAny equipment IPSec firewallinternal interface: 172.16.0.1 255.255.0.0external Interface:20.1.1.10Internal Network: 172.0.0.0/8VPN proxy IDLocal: 172.16.0.0/16Remote: 192.168.98.5/32Site BEquipment PA-2050internal interface: 172.22.6.245external Interface: 20.1.1.20Internal Network: 172.0.0.0/8VPN proxy IPLocal: 172.22.0.0/16Remote...
Hi,after i activated vsys i got messages that the backup device is suspended because of the different multi vsys config.Management CPU of the activ device was about 30% and even after 20 minutes nothing happend. Then i did a reboot on the backup device.It seems to be that everything is normal. but then i saw this on activ device:and that on back...
After upgrading i got no match in policy rules where "source user" is in "group include list.All traffic bypasses the rules and will match the "stealth" rule (last rule).Had to downgrade to 5.0.10 since we have a lot of users.Any ideas ?P.S i never tried 5.0.11 or 6.0.0 versions
The GP application is having issues and my users want to uninstall it and reinstall it to see if it will help resolve their issue. For some reason, for 15 users, the GP application does not show in "add/remove programs" so we cannot figure out how to uninstall the app. I was hoping if we tried to install it again, it would ask to repair or rem...
reaper
on:
PAN-OS 11.1.16, Unable to connect to VPN Portal or Gateway, winhttpObj, error!
TomYoung
on:
FWs no longer forwarding logs to Panorama
TomYoung
on:
Device Security license
| Subject | Likes |
|---|---|
| 2 Likes | |
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like |
