General Topics

Using Ansible to export stats-dump with specific time range

Good morning, LIVE Community. I'm trying to export stats-dump from a remote PaloAlto device to my local computer using Ansible. Prior to trying out Ansible, I'd usually use this command on the remote device to export stats-dump to my computer: scp export stats-dump remote-port <remote_port>start-time equal <YYYY>/<MM>/<DD&...

Workflow interruption by wa_3rd_party_host_64.exe interfering with app focus

When I am working in ANY other program I find many times my workflow is being interrupted and current program looses focus when wa_3rd_party_host_64.exe has started. Is anyone else getting a problem like this? How often should my active vpn be triggering wa_3rd_party_host_64.exe ? See attached EVERY time I see these processes current prog...

Execution error on a playbook solved with job

Hi all, I am using XSOAR 6.10.0Activity I am performing:Running a playbook (consisting of 3 tasks):1) task that invokes an automation that from an API call generates the response in CSV format.2) Send-mail task, from the attachIDs and attachNames of the CSV file generated by the previous task sends it as an attachment to the email.3) Closes the ...

Resolved! Panorama and PA-440 DNS proxy

Greetings, I am running Panorama and PanOS 10.2.3 with 30 PA-440s running sdwan. I'm trying to configure DNS proxy for a new business requirement and am having issues. The config for dns proxy is different from Panorama to the PA-440. On Panorama you create a DNS server profile and tie that to the DNS proxy. On the PA-440 you configure t...

Resolved! PA-HA Server - Drive Error

we are getting a commit error and HA peer end status "Non-functional drive error detected". Then we suspended the Secondary firewall after making the local device function it's showing a passive state and now it's working as expected

Issues with phase 1 of ipsec

Hi, i've been having an issue with getting the phase 1 of our ipsec tunnel to a customer up who is using a watchguard firewall.As far as i can see our phase 1 settings match up, but i keep getting the no proposal chosen error in the logs.I've attached screenshots of the settings and also a packet capture receive result. I've been a bit stumped a...

User names with two different domain prefixes - inconsistent rule application

I'm semi-reposting this because it didn't get any bites in another topic/discussion area and this seems to be a lot busier. I'm having an issue where are users are showing up in the logs as both domainname\username and domainname.com\username. Whenever I show the user names and group listings on our firewall from the CLI they show as domainn...

Domain config on Split Tunnel

Hi All, I have excluded few of the domains in Split Tunnel config. I am not able to verify if the split tunnel is working curretly. If we check the route print we are not seeing any difference in the route table. Is there any way i can test this or confirm the split tunnel is working? Also is it necessary to * before the domain? For example *pro...

Bandthwidth Issue

We are getting hardly up to 6 Mbps download & 60-70 Mbps upload. The problem is with download. When we connect the laptop directly with Tata, it is showing full bandwidth during speed test. But while connecting through Firewall, the download speed is showing between 1-6 Mpbs.

USER-ID Rules

Hi Team, We have implemented SAML authentication for GP users. Since then the Source User logs are being seen as email IDs and not with the SAMACCOUNTNAME. So the rules implemented with the LDAP user groups are not working. Is there any way we can get this sorted? Regards, Sanjay S

Different use cases for having Cloud Identity Engine setup in Cortex XDR

What are the different use cases for Cloud Identity Engine in the environment

Resolved! Sub-Interface Configuration

Hi All, Please help. I never configured Sub-Interface in PA. There is a new requirement to configure a sub-interface under already configured interface. So my doubt is how this Sub-interface if we already configured the physical interface with the IP address? What is the use of Sub-interface is it similar to the VLAN interfaces in Checkpoint and...

Resolved! Editing server profile removes the credentials from server settings. Is this a defect?

Hi, In the LDAP server profile section, if you open an existing profile and edit any field (example even an ip address) , it automatically removes the account credentials from the server settings for all servers defined in the server profile. Simply editing an entry like an IP address for one server should not remove credential information for...

How to check Content version in 7.9 Agent version

Hello All, Greetings for the Day! Kindly find below snap, how to check Content Version In New Agent version (7.9). We have observed that we are not getting "Open Log file" Option in the latest 7.9 agent version which earlier present in 7.8 version. Please let us know how we can check the content version from user's end. Thanks & Regards

MGMNT Slow and Serching logs slow and Syslog server issue.

Device Model: PA-5220 HA Mode Active-standbyPAN-OS 10.0.0The questions below as I couldn't find anything on Palo Alto website. Recently we have upgraded Palo Alto to v10.0.0. 1. Web management interface became very slow and searching logs takes very long time to load.Kindly advise if there’s any solution for that. Can we disable services of some...

Discussions

Using Ansible to export stats-dump with specific time range

Workflow interruption by wa_3rd_party_host_64.exe interfering with app focus