when i run above command it says Show IKEv1 IKE SA: Total 6 gateways found. 1 ike sa found. Show IKEv1 phase2 SA: Total 6 gateways found. 65 ike sa found. What does above number tell us ?
We have IPSEC tunnel to vendor every few mins in system logs i see eventid eq ike-nego-p2-succ and ( description contains 'IKE phase-2 negotiation is succeeded as initiator, quick mode. Established SA: 193.x.x.x.[500]-174.112.x.x[500] message id:0x8988FE61, SPI:0xB410457F/0x01E085CD.' )
Seems PA was responder and tunnel went down today at 9.29.22 MSTbelow are logs We were responder so we should know the reason for tunnel going down 72%2019-05-10 09:28:16.772 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=62c9b46a9f36df3e 9df9f7aad21a9e9c (size=16).2019-05-10 09:28:17.334 -0600 [PNTF]: { 12: ...
We have M500 as dedicated Log collector mode.Last week I changes the Log Retention from 365 to 180 days. Still Free space is only 300GB. Total space is 20 Tera Byte. Will I get any more free space or not as oldest log is set to 180 days?
Every week I recieve these emails while the PAN firewalls do their weekly updates, is there a way to not recieve these e-mails, the time stamps are exactly the same from each device, as they are upgrading at the exact same time. Is there a setting in Panorama that can eliminate these needless messages?Thanks,Craig
Hello guys, I'm trying to do something and i'm not really sure if it's possible. Let's get into... I have an url that is for example: "www.myweb.com". Our partner is hosting that web and with his firewall is just allowing us the access through our IP WAN. Everything works fine, we can access, but the problem comes when we tried to do it through ...
Hi team, I have two VM-50 v9.01, one in SiteA and another in SiteB. I set up an IPsec tunnel between them with: IKE-v1 : phase1 (aggressive mode) and phase2 (quick mode) with ESP. it works fine and I'am able to ping from a vlan in SiteA to another vlan in SiteB . I wanted to test AH instead of ESP. However everytime I want to send a ping from...
i have a PA-220 , can i limit bandwidth for certain subnets , for example limit a guest subnet for 10 mbps while let other subnet take 20 mbps? if so how do i do that?
Dear Community, I have found this side note in an article regarding the master key on the firewall. "Without the Master Key, when a configuration is exported from a firewall, the password is hashed and can be copied." Basically its the exact answer of the question I originally had. I am facing a situation where a firewall crashed. I have receive...
Hi Team In WF 500, we are unable to access via GUI but we have access via CLI (Putty). WF 500 os version is 8.0.6. Please refer the attached error snapshot. Kindly help us to resolve the issue. Thanks & RegardsMohammed Ashik
Can anyone help to provide more information if below CVE are impacted in Palo Alto product line?Intel Microarchitectural Data Sampling Vulnerabilities (Fallout, RIDL, Zombieload) (CVE-2018-12126 , CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)
Hi, We are going to add a new syslog server in PA config. So we would like to do a bit audit about PA supporting syslog sessions.What si the best way to know:-Volume of traffic per day for syslog-Top10 destination syslogs-..... thanks.
HI Expert , I would like to know that it can be possible about overlap zone name but difference Vsys such as I would to defind name Zone "Trust" on vsys1 and would to zone name "Trust" on vsys2 as well Please suggest to me Thank you
Good morning! I'm trying to figure out if it's possible to throw an "alert" log entry when a specific application is accessed. I know it can be done with categories, but I'd like to do the same with specific applications. I can always filter my Traffic Monitor for that application, but sometimes it's much more convenient to set the "alert" statu...
Hello.so I've got a curious little problem and wanted to get some opinions before possibly creating a feature request at PA. we have a customer using a palo alto as his main firewall.and a certain cloud based proxy as their proxy.connecting to this proxy is done via IPSEC vpn tunnel.our customer noted that sometimes they lose connectivity to the...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
