General Topics

Resolved! DHCP server runs out of ip pool interface Error

We are using a PA-200 for our test network and have DHCP configured on the FW. We have test devices that generate a new MAC address everytime it reboots.. so our scope is out of address. Is there a way to clear all current IP's and start fresh?

User-ID Agent Logging

We're thinking about enabling user-id agent and captive portal to more closely monitor and segment our user permissions. I'd like to know, however, if there is a document somewhere that details what information is captured and logged regarding username->ip address mapping through user-id agent. Does such a doc exist?

Resolved! Traffic summary databese

Hi,When there is no log related to a date range we can take a report for tht range from traffic summary but not traffic(detailed).it is normal for detailed since there is no log.So how can we take report summary for that range.Why is that ?

Mult-Vsys Routing

Greetings,Currently, we have a project underway to extend our internet redundancy. We have a pair of 5050's that have 3 Vsys at our main DC and a pair of 5050's which currently had two identical Vsys (the 3rd Vsys is irrelevant in this case and will only reside on that one pair). Here is the breakdown (some simplification happening):Vsys 1 = E...

Resolved! management GUI issue

Hi,I have a PA-200 with PANOS 4.1.13.After some changes in configuration and after a commit, I lost connection to the management interface and now it is impossible to connect by web GUI.Only SSH CLI is running. How can I check by CLI what happened ? The system services SSH, HTTPS and PING are enabled and all IP are permitted to connect to manag...

Layer3 forwarding

Hi all,Even I do not choose this function I can use layer2 vlan interface's as layer3.I could not understand what does "layer3 forwarding" function really do .Can someone explain this ?Thanks.

Resolved! import logs to panorama

Hi,is it possible to import device logs to Panorama ?Any change after 5.x ?Thanks.

1.8 Migration tool - JunOS file issue?

Hi all,I've got version 1.8 of the migration tool running fine in vm.I SSH'd to my SRX JunOS firewall, did a "show conf" copied/pasted into notepad and saved it as config_junos.txt. File is uploaded, status bar shows file uploading, no errors.Then it dumps me into the JunOS panel screen. I'm expecting to see the objects, services, etc in the le...

Ipsec Vpn with NAT'ed partner gateway

Hi folks,we are already running several ipsec vpn successfully, but now we have a problem.the partner gateway nat their internal networks due to ip conflicts to the external public ip address of the vpn gateway (which works on a checkpoint gateway without any problems).To move it to the PA5050 I configured the external IP as gateway ip and as th...

Active/Active configuration 4.1.12 cannot config sync from primary

Just a generic questions, I couldn't config sync from the primary in an active/active configuration, but I could config sync from the secondary in Active/Active, any explanation on why the secondary would work? Just curious

Threat log appears to have stopped.

Has anyone seen this happening, threat logs seemed to have stopped logging new information.

Netflow stopped working

I am currently running PanOS 5.0.2 and I'm not sure with which update Netflow stopped but I noticed I am not getting any data as of late. I have Netflow configured to point to my monitoring server on the standard port 2055 and the monitoring software is called Sanforce Packet Trap. Netflow is working on the monitoring software because I also ha...

Resolved! How to do virtual routing for a third ISP (new MPLS)?

We have setup in our PA-500 two ISP interfaces: Primary (eth1/1) is our primary Internet connection, and the Secondary (eth1/2) is our Backup ISP (configured for failover, and this one also is an MPLS connection to another site). Eth1/3 is our private LAN. There are two virtual routers setup for this scenario (also including GlobalProtect confi...

Resolved! VPN IPSEC With Multiple VSYS and admin role

when you create vpn ipsec across different VSYS. if you want to give access to ipesec tunnel only for a specific user in a specific vsys. is it possible?

Resolved! About SCCP

Hi,Does PaloAlto support NAT and PAT for SCCP ?Thanks.

Discussions

Resolved! DHCP server runs out of ip pool interface Error