General Topics

Resolved! Policy Based Forwarding vs Security Rules

Hello, I am not quite sure about the difference between rules created under 'Policy based forwarding' and 'Security' under Policies tab. Could someone please help understand how are the rules different that are created under security and Policy based forwarding? Thanks,PS

Important information regarding Content Apps & Threats version 709 -dataplane restart

I just move to 7.1.9 about a week ago and there seem to be warning of issues with dataplane restart and I thought it was related to the threat version 709 and I am now on 710. I have seen no issues so do I still need to upgrade to 7.1.10

Resolved! OID for CPU/MEMORY on PAN 5050

I'm looking for an OID to use for monitoring the CPU/MEMORY utilization with my NMS system. My MIB walk didn't turn up anything useful. Thanks,

Resolved! SCP Export Query from Panorama

I'm having a bit of trouble with the format for exporting traffic logs from Panorama for a particular user. I've setup the CLI command as below but the resulting csv file is empty. scp export log traffic query "user.src equals <username>" ...scp export log traffic query "username equals <username>" ... I've also tried "equal" instead...

Resolved! Panorama Device groups and pre and post policies

Hi Okay just to under stand if I have a device group TopMiddlepa and I place my device in pa group and i have rules security in the pre sectiontop -> Rule 1middle -> rule 2pa -> rule 3 how does that look on the actual PA. if I look at my device security will the policies be rule 1rule 2rule 3 or rule 3rule 2rule 1 and i presume its &...

Resolved! App-id and Migration Tool with Panorama

Hey all, I use Panaorama to manage our firewalls. At the time of our deployement we simply just migrated the existing ASA configuration to the PAN Firewalls to get them up and running as fast as possible. We would now like to migrate our service ports to App-id. I found out how to do this during Ignite 2017 using the MIgration Tool but it was ne...

Report not showing URL by name, just IP

Hello, We are new to using reporting on the PA 3020. When we run reports, specifically a user report, we would like to see the URL by name of the location on the Internet our user was visiting. However, as shown in the included photo, some URL's are decoded and some still show IP only. Is there a config or something we've missed? Is there a meth...

Resolved! Long Term User Activity Logging/Reporting Options

We have 2 3050 appliances (not in HA) managed by a Panorama VM. For now all are running version 7.0.x but we are upgrading to 7.1.x in coming months. We may have a requirement to retain user activity logs (mostly URL activity) for a minimum of 6 months to a year for around 1100 users. Looking for recommendations if we should increase our Panoram...

How to configure MineMeld to forward Logs to RSA Security Analytics

I want to forward the output of output nodes in minemeld to SIEM, I want to see the output indicators in Security Analytics to create rules and when an indicator match generate an alert, actually I have configured PaloAlto Firrewalls with Dynamic List but I would like to send output indicators to SIEM

Available Feeds

I'm looking to understand what are the available address feeds which can be consumed from Minemeld. Is there somewhere I can look this up, without installing it?

Resolved! What is panGeneralGeneralTrap?

Hello Now we setup snmp server and recieved snmp traps.We recieved "panGeneralGeneralTrap". What meaning it? Thanks.

Resolved! Site 2 Site VPN

I have an issue where we have ike traffic comeing from the end point which is being allowed but the ipsec-esp is being caught by the deny all rule. The strange thing is that the the rule to allow ike and ipsec-esp is on the same rule. We do carry out NAT on the public IP for some ports , is this this the issues Can any one please point me in th...

Resolved! Real world experience Panorama 8.0.x with firewall devices running 7.0.x / 7.1.x

Hello, does anybody have real world experience with Panorama running 8.0.x with firewall devices running 7.0.x / 7.1.x. Currently Panorama is running 7.1.x. Due to new commit features and improved log performance we would like to update Panorama to 8.0.x We make extensive use of device groups and templates.

"Change Monitor" Reporting

Hi community PAN has this really nice feature called "Change Monitor" in the WebUI under monitor tab>App Scope. Unfortunately this feature is only available in the WebUI and not in Custom Reports or by API. Has may be someone found a custom solution on how to get the outputs from the "Change Monitor" into periodic/daily automated reports or m...

Time out Oracle sessions

Hi, We have problems with time-outs in Oracle connections. We are seeing how the BBDD sends keep alives and in the FW is increased the number of packets when passing the keep-alive packet, but following one of these connections, in one of them we did not see increase the number of packets in the firewall, And the time to live of the session is n...

Discussions

Resolved! Policy Based Forwarding vs Security Rules