Last SNMPv3 question

How does one know if SNMPv3 is truly working . I ask because I just copied SNMPv3 profile from a known system but dont have actual auth/priv credentials to do snmpwalk since profile is encrpted in terms of password. Are there logs I can check particu...

High availability failover due to high dataplane usage

our internet went down a few weeks ago when our primary PA failover to a secondary PA. We found out, after doing some research and investigative work, that this was due to the amount of new session created, which cause the PA to use the slowpath and

How do I fix this?

Trying to connect PA-500 to user id agent on domain member server and keep getting this from the agent ID app log.

10/02/17 18:33:09:959[ Info 1219]: New connection 10.100.20.20 : 33369.
10/02/17 18:33:09:975[ Info 1292]: Device thread 1 with 10.100.2

How to count sessions at Palo Alto.

Hello all.

Syslog multiple configurations

I am having no issues actually sending syslog data.  The issue is sending to much over the network.  I have two different applications that require syslog data from the firewalls.  One application requires all the logs with all the content.  The othe

packet-diag flow basic “matched rule index 0”

What does the rule with the index number 0 refer to in the packet-diag flow basic for the security as well as the NAT policy? The id manager does not show a security nor nat rule with an index 0 while the show session shows that the traffic was match

Problem with NAT

Anyone running Sophos antivirus/webfiltering solution on client machines?

It appears that the sophos client on the windows machines uses its service account username to browse on behalf of the user. So essentially being a proxy for the user, the issue is from the monitoring aspect of the palo alto, I can't see the true use

cron services restart of minemeld

Hi,

I'm researching about restart all the services of minemeld but I don't get nothing. How I can do it? I would like set a task on cron for example. 

is it possible? Please, if you need more info let me know!

Thanks

How to use a Taxi Output for SIEM ingestion when MM is hosted by Autofocus

We have a taxi output in MM that is hosted by Autofocus.  Wasn’t able to find a doc on how to pull the stix/taxi feed from MM to a SIEM (Splunk) when its hosted by us.

Anyone done this?

How to delete all unused rules?

Hi Guys!

I am looking for an way to delete all unused rules.

On CLI, I can list all unused rules:

> show running rule-use rule-base security type unused vsys vsys1

After that may it is possible to delete the rules from it.

Thanks!