General Topics

Migrating SRX JunOS configs to Palo Alto

I know the migration tool does not support migrating SRX configs. Is there a tool out there that I could use to import a SRX config into a new Palo Alto 5060?Has anyone ever done it?If there isn't a tool, is there a way to import .csv files into Palo Alto? I'm on version 5.05.Any help would be greatly appreciated!Cheers!

GlobalProtect Client Rollback

Is there anyway to rollback the GlobalProtect client on an end-user's computer? I tried ReActivating an older client but, the client on my computer remained the newer one and did not rollback.

Custom Report for all File Types

Hi there,I'd like to generate a report to display all file types passed through the firewall within last 6 hours.I believe it's under Custom Reports / Data Filtering LogWhatever I chose there however, I don't get any results.Could you help ?Thank YouBR,Mariusz

Resolved! Is it possible to schedule for configuration backup ?

Hi All,Is it possible to schedule for device configuration backup ? so that configuration will get saved on any computer or other device.Example : I want to save configuration every day 5pm or when there is a configuration change in the device.Regards,Gururaj

Resolved! webgui login custom logo

Hi,Is there a way to move custom logo of login page from the middle of the page to top left or etc... ?Thanks

Resolved! High CPU on the dataplane

Hi thereIve setup a system where i have our data server on the trusted area, our partners are on a untrusted lan area and have access to a few of our data shares.If the copy files using smb the datplane goes up to 98%, ive used an application overide and stopped server response checking to imporve the data performance, is there a way of reucing ...

Disable SSH password authentication?

After I have loaded public keys for administrators on my PA Devices, is there a way to disable SSH password based authentication?Thanks!

GlobalProtect - Linux VPNC self-signed cert

Hi all,Any one knows whether we can just use self-signed cert in Linux VPNC without using the Pre-Shared Secret Authentication? Or it is a must to use the Pre-Shared Secret Authentication?Than

Resolved! Dropbox rules

Hi Guys,I have had an issue arise that seems to be related to Dropbox using Amazon's S3 storage. We have had need to allow certain users access to dropbox to upload files to clients and between sites with slow connections. And in the beginning I created a rule that allowed access using dropbox and SSL to the Dropbox Netrange they use. Which was ...

When I connect PA 3020(5.0.4) the upload and download speed degrades severely?

Currently we are running Cisco ASA firewall which is connected to the ISP. When the ASA is connected we get an upload and download speed of 100MBX100MB.Whenever I connect the PA 3020 the upload speed falls to 10Mbps and download speed to 70Mbps. Has anyone experienced this before on a PA platform?

CLI FTP Export Log URL Issue

I'm trying to run a report on user activity via the webfilter for a particular user. I would use the GUI but the the GUI is only allowing me the last 500 hits (via a custom report). If I go to the actual monitor and try to export I get a server 500 error. This has led me to the CLI. ftp export log url query "src.user eq '<domain\username>'...

Resolved! permitting/denying asymetric TCP flows at the VYSY level?

Can "set deviceconfig setting session tcp-reject-non-syn no" or similar somehow be configured at just the VSYS level? ( I know it functions at the device level)So as to provide some VSYS's the ability to process asymetric flows and others not.Regards,

Resolved! V5.0.4 HA Group1: Running configuration not synchronized after retries

This message appears (email, and SNMP trap) pretty much anytime I run a "commit" on the box. It appears cosmetic, as the GUI on both boxes show them being in synch. (possible latency/delay issues during synchsynch causing this mis-fire?)I noted this was an issue in the 3.x version of code, did they somehow "unfix" this bug? Anyone else experienc...

Running mutiple OSPF instances on on virtual router ?

Hi,Can we run multiple OSPF instances on one virtual router ?In cisco we can run two OSPF processes for example , router ospf 100 router ospf 150 Kind Regards,Sunil

User mapped via CLI but no through Web-UI

Hello all:I am trying to configure an user in a security policy but when I write the first 4 letters of his username it doesn't appear (screenshoot attached). However, it does appear throug CLI:admin@PA1(active)> show user ip-user-mapping all | match mmlu10.161.34.189 vsys1 UIA idc\mmluque 3516 3516Any cl...

Discussions

Migrating SRX JunOS configs to Palo Alto

GlobalProtect Client Rollback

Custom Report for all File Types