Hi all, How can I monitor memory statistics on dataplane from the CLI (not SNMP) ?? Regards, HA
Hi, I would like to monitor VPN is UP using NAGIOS. I think its necessary configure tunnel monitor for this, right??? what are the options to monitor VPN is UP? and monitor config profile.
Hello All - I am not seeing logs in the monitor section, when i generte traffic from Paloalto Firewall itself. For example, when I ping 4.2.2.2 from the Firewall, i am not seeing logs showing for. Is it a known behavior? or i missing something? is there anyway to capture the logs showing the traffic generated from firewall like SYSLOG, PING, SN...
How PA 5220 appliance sends NetFlow packet when configured in HA and Vsys Mode. does the firewall find egress interface by looking into routing table for Netflow packets? If it is Yes, So why we need to change service route on PA 5220 appliance, Secondly, As appliance in HA pair so it sends statistics about active firewall only ?? Also would lik...
So I configured Link Aggregation on my PA5260 running 8.1. The first pair of links in ae1.8 comes up perfectly using 192.168.255.3/25 as the IP address. The second pair of links in ae2.9, however, refuse to respond on 192.168.255.131/25. The second pair is in a different security zone and there are no policies in place to block the ping requests...
Hi, I am configuring some new PA850s and interfaces are set to Vwire mode. ports are connected to cisco switch but they are not coming up. they come up and go down. here are settings from cisco side:speed 1000duplex fullno mdix auto paloalto ports:speed 1000 and everything auto. Can you please help? Regards,
I'm trying to import logdb coming from a PA-2050 to a smaller devices like VM-100, PA-200 or PA-500 but without any luck. Has anyone successfully tried this operation?The command scp import logdb from ... seems ok but in the end no data is shown under Monitor > Traffic page.Importing the exported logdb into the same units, after a factory res...
[Failure event]In the case of O365 's xml format, when MineMeld received traffic after ClientHello, I got a list but if I set config for JSON support I can not get a list. [Prerequisites]MineMeld will go through Paloalto and do Internet communication. [Question]I think that the packet flow that can be checked with Paloalto is incorrect.We were a...
I've noticed that some App-IDs have web-browsing and ssl implicit to the application while others they are dependencies. Is there a reason for this?Are the App-IDs being updated to make these 2 applications implicit? For instance, I'm setting up firewall policies for both teamviewer and Office 365. There are many more but I'm using these two ju...
Is it possible to convert (migrate) a SonicWALL NSA3600 configuration to a PA 220?Using Expedition 4.0?Other method? Thanks
Does anyone know what filters are supported for the tcpdump command on PAN-OS (7.0) ?For troubelshooting of a Syslog (server) issue, due to large amounts of traffic, I need to capture only packets with syn- or fin/rst-flag set.Something like this : # tcpdump 'tcp[tcpflags] & (tcp-syn|tcp-fin) != 0 Documentation found 'How To Packet Capture...
Since DoS protection is for more granular protection of a server, how can i see the statics for the particular server i want to protect. Wouldn't we need to know the pps statics and sessions for that particular server.
1) this is for a home use environment. 2) I have successfully configured Global Protect to work external. 3) I have PLex running and need to get it communicating to the world. Was able to do this before GP by setting "Service" to "any" in the NAT rules, but this broke GP, and not to even say isnt very secure. Anyone have suggestions?
Hi, I'm going to migrate a Juniper SRX firewall with a Palo Alto VM-500 firewall.The case: The Juniper firewall is configured with multiple virtual routers. Between this routers we can static NAT subnets. As showed in the picture below, we have 2 virtual routers. If Subnet 192.168.1.0/24 behind VR A should reach Subnet 192.168.2.0/24 behind VR B...
Greetigns Is there a section of the forum where people involved with education Institutions. I want to get some idea of how and what people allow when dealing with Children in a school when the age ranges from 8 years old up to 17 years old. as well as catering for the staff. Which I then need to work out how to do that on a Palo Alto. Thanks fo...
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
