We have aggregate interfaces under which we have created sub interfaces. The graph for aggregate inerfaces displays expected avg/min/max but the sub interfaces are displaing very unexpected avg/min/max.
Hi Everyone, Recently a decision was made to implement SSL Decryption for outbound inspection. We work within a Microsoft PKI environment and are experiencing issues in signing the CSR generated by the firewall. I create the CSR based on the "how to implement and test ssl decryption" document I found via the Live Community (https://live.paloal...
Release Date: 2016-04-19 How to update: Updating MineMeld UI - new logo - new you can edit and create a local version of an existing prototype, just press NEW at the top of the prototype view Nodes - miner for JSON feeds Prototypes - prototype for AWS IP ranges, based on the JSON feed Miner (suggested by coldstone1) Engine - better de...
What is the difference between stdlib.feedHCGreen vs stdlib.feedHCGreenWithValue? What is Value? What to use and where?
Maybe a stupid question and\or I've missed the obvious... One of the issues we have with our Palo firewalls is - when we deploy 'active' IPS rules (block-ip etc) the maximum length of time is 3600 seconds. We have a log solution that we use to trigger alerts if we're being probed over multiple days etc and would like to trigger a script, ra...
Hello All, Based on @lmori's great guide for doing a manual install of Minemeld on Ubuntu 14.04, I have taken his configurations and wrapped them in a Vagrantfile for easy foolproof deployment of Minemeld. It's a simple 3 step process: Install latest version of Virtualbox for your OS (Download) Install latest version of Vagrant for your OS ...
I am having major issues with my TAXII feeds recently. A long running feed stopped working recently with an error "'unicode' object has no attribute 'get'". I have figured out that it only gives this error on any MM instances running on Trusty 14.0.4.5 that were manually installed. The cloud loader install seems to work with the same config impo...
Hello Network, Is it possible to configure a Minemeld node to have a Feed base URL that is HTTP instead of HTTPS? Thank you in advance,Scott
Hi all, I managed to install MineMeld on-prem and are playing around with it now. As a first task I'd like to setup a domain feed delivering SpeedTest.net hosts from countries we deployed Palo Alto firewalls. Setting up the miner, a domain aggregator and an output worked, no problem there. We download the full hosts list from http://c.speedt...
Hello all,I'm tasked with initiating a graceful shutdown of mutiple PA3060 firewalls following UPS-detected mains power loss via a scripted process. I can login to invididual firewalls using plink but I can't work out how to enter the shutdown command with the confirming 'y' keystroke.Does anyone have experience of this, please?We have Panorama ...
Hi All, i having 1 application claim that their port is stuck on Syn send status and there is possibility causing by palo alto firewall. i did check on the traffic log .. it showing session end with tcp resue. i not sure is that tcp-reuse will causing the port hang?if yes any way we able to tune it? one of our application port 2020 is stuck on s...
Hi, Got this message on PA220 running 8.1, Time Severity Subtype Object EventID ID Description===============================================================================2018/03/18 02:00:18 high general general 0 GlobalProtect data file version 1521363012 failed to install Anyone know how to fix it? There is no download button on the WebUI,...
Hi everyone, Now I can access webui normanly but I can't access to Firewall Palo Alto via SSH2 with the same account. When login with SecureCRT, it appears notification : Password Authentication Failed. On palo alto appears notification : Failed password for 'account name' from 'x.x.x.x' port 64249 ssh2. Please help me fix this error.
I have a customer who is implementing a pair of 5250 in active/passive. The firewalls are in separate DCs that are connected with fibre. It seems HA2 over the SFP ports is OK but HA1 seems to only work over the 2 AUX ports not any of the data ports. The docs say use these ports for SFP+ but it doesn't say NOT to use other SFP ports for HA1. Thou...
I was just wondering if Palo Alto would consider scheduling support sessions with customers via https://www.timetrade.com/ or something similar. This would help to manage time coordinating support sessions.Thanks,
BPry
on:
Issues with connectivity between HA PAs and Nexus Leaf Switches
BPry
on:
Network wifi Management
BPry
on:
URL FILTERING
