Is there any way to tell the physical characteristics of an interface from the GUI or CLI? (i.e. SFP port vs copper Ethernet)
Hi All,Seen this in the ldapd.log file.Has anyone come across this before ? Mar 16 10:10:03 connected to ldap server ldap://172.17.23.132 Mar 16 10:10:03 ldap cfg LDAP Server connected to 172.17.23.132:389(index 0) Mar 16 10:10:09 Warning: pan_ldap_search(pan_ldap.c:521): failed to create page control Mar 16 10:10:09 Warning: pan_ldap_search(pan...
Hi There; For some sessions like availability monitors and other systems that make connections over a port that has the "service http or service-https" applied in a policy, these will fail unless you allow any service to the host or create an application override for the specific destination. This is beacuse most of these availability monitors ...
Hi All; Thought I'd post this for anyone who has the PA going through a cisco HSRP L2 at the perimeter. Traffic is intermittent between the two firewalls if you leave the passvie device interface to "Auto" instead of "shutdown" in the passive state. You'll notice if you unplug or turn off the interface on the passive device that the packets are...
Hi All.I tested that PA with AD using TAP-mode.AD-agent, CLI at PA device could recognize users from Active-Directory. but Traffic logs, Threat logs, URL logs could not recognized user-id and session-browser showed user filed was unknown.I think that PA could not recognize user-id from AD using TAP-mode. is it right?Please answer about above.Tha...
SSL decryption seems to interfere with Carbonite. When the policy is enabled, the Carbonite client reports "waiting for connecton to carbonite pro backup server...". I assume I could add a rule to not touch anything in category "online-personal-storage", but I'd rather not just guess until I get it right.Has anyone had the same experience?Than...
Hi All,Seem to be having a bit of a problem with skype-probe.I have a PA-500 in Vwire mode behind a PIX FW, the customer wishes to block Skype traffic.Observations:1. On the ACC the ammount of skype-probe traffic far exceedes any other traffic in terms of sessions2. The ammount of bytes of skype-probe traffic is roughly in relation to th...
Hello,I would like to create a custom report that will list all the uploaded excel files from our internal network.From the 'Manage Custom Report' I am using the 'Data Filtering Log' Database to create the report but I cannot add a filtering expression for the file name e.g.(filename contains 'xls'). Is there a way to produce such a report?Kind ...
Is there a way to pre-stage device level configurations within Panorama? I would like to build a virtual systems, virtual routers, security policy, etc. on a "dummy" object in Panorama, and then push these changes to a real firewall when I bring it online. Is this possible? This is something I am accustomed to doing in Check Point and other ve...
Under Authentication Profiles on Panorama 3.1.8 I noticed one of my admins is apparently locked. When I try to unlock by clicking on the link I get the error:vsys unexpected here locked-users unexpected here authentication unexpected here show unexpected here I can't even tell which admin is locked. The auth profile is for RADIUS-based RSA token...
Does anyone know what the OIDs are for monitoring temperatures and other environmental conditions in the different PAN devices? The reference documents do not include this information.
I made a quite shocking discovery about PA and how it inspects SSL encrypted traffic. Please correct me if I'm wrong.1. To allow simple HTTPS web browsing traffic it isn't enough to allow "web-browsing" application in the policy, you must to allow "SSL" application as well, otherwise only HTTP browsing will work, but not HTTPS.2. All non-HTTP tr...
Hi all,I'm trying to retrieve applcation filters and groups with the pan rest api, same way it can be retrieved with the cli:show vsys <vsys-name> application-filterThanks,Andrei
If you work with firewalls long enough you will undoubtably run into this issue. I have a webserver in the DMZ that needs to talk to the database server on the inside. The connections need to be nailed up. In otherwords, I dont want the firewalls to close any connections that it feels may be idle as this causes errors in the aplpication.So, I cl...
Hello All,Seem I was bitten by the Java security update and a Win7 64bit OS during the installation of SSL-VPN NetConnect and PanAgent service. My computer will now no longer successfully connect to the PanAgent service and NetConnect hangs on establishing a connection. If I use Add Remove Programs to remove the application the PanAgent and PanI...
PavelK
on:
Replacement of RMA
| Subject | Likes |
|---|---|
| 4 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like | |
| 1 Like |
| User | Likes Count |
|---|---|
| 5 | |
| 4 | |
| 3 | |
| 3 | |
| 2 |
