Recently I have noticed that it is taking longer to commit and sync the changes from my active PA to my passive PA and the management plane ramps up to 38%. any suggestions
Hello, Is there any way to fully deploy minemeld from the source code?
during the bower install I am getting this error. TASK [minemeld : bower install] **********************************************************************************************************************************************************************************************************fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": ["bo...
Hello! My first go at using MineMeld and running in to some issues during installation. Installing on 64bit Ubuntu 16.04 LTS. I follow the steps:$ sudo apt-get update $ sudo apt-get upgrade # optional $ sudo apt-get install -y gcc git python-minimal python2.7-dev libffi-dev libssl-dev make $ wget https://bootstrap.pypa.io/get-pip.py $ sudo -H py...
I have seen a few older threads referencing minemeld on CentOS using ansible or docker etc, Does anyone have it running on CentOS natively without the use of other 3rd party tools? or an up to date walkthrough? The Ubuntu 14.04 setup is quick, simple, and just works but since there are no packagse (is this still the case?) I don't want to spend ...
First post to this forum! I have a PA-500 and 3 ISPs. 2 of the 3 VLANs are forwarded using PBF (VLANs 10 & 30 ) and the third uses the default route (VLAN 20). My (simplified) configuration is as follows; VLAN10 - PBF to ISP 1 fail-over to default if the monitor address is unreachable. <- This is working OK VLAN 20 - No PBF, direct to th...
Hello,I have a doubt about how to interpret macs in rx pcap and tx pcap. I thought that:when the traffic enter a layer 3 interface:the mac destination addres in rx file must be the mac of ingress interface?and in tx the source mac, must be the mac of eggres interface?when the traffic enter a layer 2 interface:the source and destination mac don'...
Does anyone know of a repository where people can search for all conditions which would trigger a SNMP-TRAP message from a firewall for a severity level of High or Critical. Thank you, George
Our PA-500 management utlization reaches 100% sometimes...according to PA support, There's a process called 'gdindex.sh' runs every 15 minutes for log indexing.We need to reduce the management plane traffic for better performance. Any suggestions?
Hello I am using the Palo Alto Next Generation Firewall PA-3020 / PAN OS 7.02. I use EBL to block IP. After testing, it will take a long time for IP registered in the text file to be applied to the firewall. Of course, i set "repeat" to 5 minutes in the EBL setting. Also i checked that "repeat" was set to 5 minutes in the CLI. However, when i ch...
Hi We are replacing a 3060 with a 5220 , I do understand that Tech Support dosen't recommend to move configuration filebetween two different models.Are there any items that can be transferred , and not have to recreate all of it ? Thanks
Hello I have a doubt about applications:If I search in my palo alto object>applications search: youtube I obtain next outputI can add to a policy rule youtube but when I open I found that don't have dependency, and implicitly application uses.I s correct to add youtube in a rule and not some child? If is correct to do it, this is equal to ...
We are setup as active/passive and have intentionally caused a split-brain with our firewalls (5050's) by removing one from vwire mode and removing all cables except mgmt port to perform some migration activities. We left the "Enable HA" checked on both the primary and secondary. Question: We want to uncheck the "Enable HA" (primary first with ...
Hi Team We have a firewall working in Active/Standby configuration. The firewalls has been configured with Master Key .We lost the master key secret ( in other context we not sure the current master key is default or custom configured but noticed its going to expire in 50 days) and would like to know how to restore the device before the master k...
Can you please help us with the new 3200 and 5200 interface types, because it is not very clear in the hardware documentation? The firewalls now have HA1 and HA1-Backup dedicated ports. The 5200 also have AUX-1 and AUX-2. Can we still use any other data or management port for HA1 or HA1 Backup?The HSCI interface can be used for high speed HA2 di...
OtakarKlier
on:
SIEM posting Botnets , but Firewall do not
BPry
on:
Captive portal auth doubt
