General Topics

VM based PAN FW

Hi,I have not been able to list the interfaces on VM based PANOS 7.1.0 after the VM PAN FW boots successfully. interfaces have been set to vmxnet3 type on VM settings. I have configured 3 interfaces (1mgmt and 2 data). assiged the static mac-address. show interface management -->list the ip address 192.168.1.1show interface all -> doenst ...

Minmeld on Unbuntu

Hi, We run a hyper-v shop so I am looking to set this up on Unbuntu. Just a few questions before I set off on the install: Can we install with the most recent version of Unbuntu? Is there a reason I need to run it on 14.x? I didn't resource requirements on the Unbuntu install page - what I do I need for CPU, RAM and disk space? Any other r...

Minemeld engine stopped - error starting engine

I would like to create ipv4 output based on the aws ec2 and route 53 miners. I cloned miners, aggregator and output from prototypes. When I hit commit nothing happens. I can see the processes stopped under System. If I hit restart for the engine, I get Internal Server Error. I already tried by rebooting the server and tried the same. I have atta...

Resolved! Virus/Win32.WGeneric.lrtmv - False Positive?

We are showing the following virus in our threat logs:Virus/Win32.WGeneric.lrtmThe application is "flash"Anyone experiencing this and is this a false positive? Thanks!Amy

Resolved! VLANs for HA links

Hi all, I am configuring two PA 3060 in A/A HA across datacenter. All the HA links from a PA in a DC will be connected to the core switch. Is it possible to put all HA links, i.e., HA1, HA2, HA3, HA1-backup, HA2-backup, in a single VLAN? Or does each link needs a separate VLAN? Thanks

User-ID Hierarchy Design

So we have our device groups laid out like this, there’s more but you get the idea. Shared > Regional > Site.The devices are members of the Site device group, and have a master device allowing me to push User-ID rules down through Panorama. If I want to do Regional or Shared User-ID rules, I have to collapse the device groups so they’re al...

problem with IP helpers after migration

We're migrating from a PA-2020 to PA-3020.PANOS 6.1.12 Config migration went fine. And most functionality is ok on the new device.However our IP helpers don't work anymore. We use them on tagged subinterfaces.All subinterfaces on one interface connected to switch. Capture shows the device receives the DHCP discoveries. But it does nothing with t...

[MAC Book]OSX USB Serial can't been connected to PA Series when maintenance

Hi all I am using mac os and I installed usb seria dirver on my labtop. The usb serial is from Prolific. when panos is booted and login, that is working reponse properly but when I enter the maintenance mode, I couldn't choose menu[factory reset etc,,] that I want, It seemd like interuppting, I tried to do command line for many severtimes, I...

User-ID inconsistancies

Hello, It's not the first time that I am facing this kind of issue : Context : PaloAlto FW with (multiple) userID agents in a single (or multiple) Microsoft domain and user id based security policies. The User ID feature seems at a glance to be working well, however sometimes UserID seems to "loose focus" on several source IP addresses (users). ...

Application Command Center empty and risk factor set to zero

Suddenly the Application Command Center became empty showing " no data to display" and risk factor set to zero.after debug software restart log-receiver on the cli the logs started to repeear but only for a few minutes then disappeared again.Any suggestions?

Resolved! RDP NAT connection issue?

Hi folks, For test purposes, I am trying to get RDP to work going through my PA-200 OS 6.1.4 to an internal PC.I've been following several articles like this one, but not getting it to work.https://live.paloaltonetworks.com/t5/General-Topics/MS-RDP-NAT-Issue/m-p/15217/thread-id/11171/highlight/true I must be doing something wrong since my intern...

Resolved! NTLM authentication fails

Hi all, I'm facing an issue with captive portal and NTLM. The SSO (NTLM) fails and the users must enter the credentials via the web-form. I've attached print screens from Wireshark and the output from the userid.log: PAN-OS: 8.0.1User-ID Agent: 8.0.1-21 [2017/04/25 11:07:48, 0] utils/ntlm_auth.c:get_winbind_netbios_name(172)could not obtain win...

No Block Page when accessing Blocked Categories over HTTPS

Hi there,I have recently noticed that when I test access to URLs of blocked categories over HTTPS, I do not get a 'Blocked Page' display from the Palo. It just says the Page Cannot be Displayed and show the connection was reset. The URL filtering log correctly show as 'Block-URL' for the action. I just do not get a 'Block Page'. SSL decrypt is n...

Resolved! Where can I obtain rsyslog-minemeld?

Hi, I recently deployed an ansible built version of minemeld on Centos. However it does not appear to include rsyslog-minemeld? Is that still required to use the syslog analyzer node? If so, where can I obtain a rpm version of it?

Question about vlans/Router on a stick.

I'm looking to configure a Palo as a router on a stick for a site to replace a decrepid Cisco 1811r router. The only printed information I can find is a 4.x document with pretty dissimilar UI images. I've configured mutliple subinterfaces underneath my primary trusted interface, each one is tagged with the vlan tags being used on the L2 switches...

Discussions

VM based PAN FW

Minmeld on Unbuntu

Minemeld engine stopped - error starting engine