Monitoring the firewall

Hello,

i would like to monitor the firewall using centreon. Unfortunately we are using the free version so we dont have access to the snmp and ssh plugins packs and we have to do everything by ourselves.

To get CPU, uptime information and so on i

Static route Path Monitoring showing down

Hi All,

I am facing an issue with the path monitor. I have created the path monitor for two static routes and the destination is the same but the stacked switch is placed in a different location. 

I am using the two different IPs used for path mo

Tunnel Monitoring

Hi Team,

I wanted to setup Tunnel Monitoring for the Dynamic IPSec tunnels. Peer end IPs are dynamic, we have around 5 to 6 VPNs that we need to monitor. I was going through the SK where it says for Tunnel monitoring, we need to have IP address confi

System Log Events

Does anyone know if there's a list of all the events that get logged to the firewall System Log?  If so, could you please point me to it?

The Administrators Guide refers to this list however, I cannot find it.

Kind regards,
Jeff

IPSec Phase 1 tunnel not connecting

Hello Everyone,

Need your support to fix a FW to FW PA IPSec Phase 1 tunnel not connecting.

I have checked the setting with the vendor and configuration is same at both the ends.

Below are the debug logs from PA

2023-11-30 14:30:40.000 +0400

Required PAN-OS 8.1.25-h1 for PA 3060

Hi,

As per the advisory https://live.paloaltonetworks.com/t5/customer-advisories/emergency-update-required-pan-os-root-and-default-certificate/ta-p/564672 customer need to upgrade the PA 3060 from version 8.1.15 to 8.1.25-h1 or greater but i'm unab

insufficient-content URL category

What is insufficient-content URL category and what is the recomended action for that.

PANOS 9.0 root partition fill in PA 3000 models

Hi Community,

We are able to upgrade to PANOS 9.0 from any maintenance version of 8.1. 

Once we install Base version 9.0.0 and maintenance version 9.0.X root partition is getting filled upto 93 to 95%.

Let say firewall is running in 9.0.6, If we want

Unable to HTTPS or SSH into new out of the box PA440

Had a new PA440 delivered to a remote location. I am able to ping the device (192.168.1.1) but am not able to HTTPS or SSH into it. Assuming that my IT person at the remote location has the device plugged into the MGT port and in the switch, which si

Best Practice Assessment Tool behind a license now?

I see the BPA has been moved to AIOps and needs a premium license? Is this correct?

vmware-carbon-black and App-ID

I've run into an issue with regard to deploying VMWare Carbon Black within my environment.  There are a subset of endpoints that have never connected to the Internet directly and use proxy allowances for Windows Updates, etc. I have requested that th

programmatically create address objects.

Hi,

Is there any way to programmatically create address objects, via API or something?

I have a list of approx. 50 subnet ranges for which I need to create corresponding address objects in the firewall, hence was thinking if there is a quick and ea

Data Filter

Hi,

I want to block all Microsoft files and pdf files data transfer through data filter, Could you please help me at 'file property' and 'property value' in file property data pattern 

Thanks

Dhananjay