General Topics

Panorama Backup

What solutions are used to backup Panorama VMs? We want to make a full backup of the VM, not just the configuration and log export tools built into the system. This is for DR purposes.However since we cannot access the system at the OS level, our sys admins can't put vmtools on the system to facilitate with their usual backup procedures.How do o...

Interface Statistics?

Is it only possible to view interface statistics if QoS is enabled on the interface?Mike

NAT IP Pool Clean Up

Having a problem with a NAT IP pool filling up. There are 92 IP addresses in the pool which should be plenty compared to the number of active clients. However, the pool is filling up. When I go to look at what active sessions a given IP address has, I find that many have no active sessions (with "show session all filter source <ip>" or "sh...

Resolved! A few Panorama-questions

Hi all!Got a few question related to Panorama which I hope you can help me with?1) Whats the FR id regarding having Panorama to be able to forward received logs?That is PA-device -> Panorama -> SEIM/Syslogarchive.2) For which version is this feature expected to show up, and any ETA for when we will see this version available in the downloa...

Does someone know the total number of protection profiles which can be used per type of device?

Hello all,I am searching for the total number of protection profiles per type of PA in order to answer some questions of on of our customers...Hope that someone can help me out on this?Thanks in advance!Brian

Resolved! Strange logs

Hi all,Does anybody know what this logs mean ??2013-08-23 12:50:14 [PROTO_NOTIFY]: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=a779fc43d8e05d1d 9af0ad6c1e566bdf (size=16).2013-08-23 12:50:14 [PROTO_NOTIFY]: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=a779fc43d8e05d1d 9af0ad6c1e566bdf (size=16).2013-08-23 12:50:16 [P...

Content Updates Failing

Hi,I am trying to update the content (application and threats) on our PA-500 firewall running version 4.1.8-h3. However, this is failing, and am getting the message below. Any ideas on how this can be fixed?OperationInstallStatusCompletedResultFailedDetailscontent update failed with the following messages: No matching apps package found in panup...

Can i block file by file name?

Hi,so, can i? Eg.: i want to allow upload/download .pdf files, but block "hacker tutorial.pdf" file. How i can do that?

Resolved! Packet capture in traffic log

Hello,i have a hundreds pages of traffic log, how can i find captured packets? Searching for green arrows manualy is annoying, can i somehow use some filter or something?

Dynamic Block Lists and IP's

I saw this line in an article about Dynamic Block Lists."as our threat team identifies malware, they automatically take any URL or IP associated with that threat and will include it as part of the PAN-DB URL filtering database. "Does this mean that the PAN-DB contains all the IP's that the URL's resolve to? I would not think so since that one IP...

Panorama Template conflicts with base device config

I am in the process of building out my Device Groups and Templates to standardize configurations across all sites. Our sites are standardized in a way that we can actually apply device configurations across multiple sites. After the base templates are applied all I need to do is apply the site specific data such as their local subnets and up add...

URl Filtering Security policies

In URL Filtering Security Profiles, there are a few actions that can be configured for each URL category.- Alert – permits access to the category and logs it- Allow – permits access to the category, but does not log it- Block – blocks access to the category and logs the access attemptCan you confirm that “block” always...

Detecting Data Patterns in Large Files

A question came up in class today in regards to Detecting Data Filtering Patterns in Large Files. Does the firewall buffer the file being inspected by the Data Filtering Patterns so that it can detect all occurrences of the Data Pattern before sending the file out of the firewall? Or would the recipient get a truncated version of the file sinc...

Resolved! Adding Users to a Security Policy

I have agentless User-ID setup on my PA-500 (Software is 5.0.4). I can do the command "show user ip-user-mapping all" and see a list of user accounts associated with IP addresses (not all of them in the domain, but I'm assuming that it's just what has been seen through the Security Logs on the domain controllers). I've set up the Group Mapping...

User activity reports

I'm getting a bit of a funny one on my Panorama. When I run a pdf UAR for a user using the "last 30 days" option - I only get the detailed reports on web activity from the 2nd of August till the 16th of August. When I change the date option to the last 7 days I get from the 16th till today. Anyone any idea why I'm not getting the full 30 days wh...

Discussions

Panorama Backup

Interface Statistics?