I want my telnet back!

[panwmod]

Don't get me wrong, I really like PAN-OS 5, but why did they take my favorite troubleshooting tool away?

The PA is the new device in our environment and if anything is not working all blame on the 'new guy'.

User claims: 'since we have the new firewall I can't get to webpage xyz anymore' 

Admin: A quick telnet from the PA to xyz on port 80 is timing out?

Admins answer: Sorry Sir, the webpage is either down or somebody upstream is blocking the access. Not even the firewall can get there.

Actually, if they re-enable it (the underlying BusyBox certainly still supports it) it would be really cool if we could specify a source interface like for ping and traceroute.

Am I the only one who's missing telnet or it it worth an RFE?

[msullivan]

<me being funny>

Good news, in light of all the PA customers input, PA had decided to replace telnet with nc in the next update! :smileydevil:

</me being funny>

[jochristian]

Looks like we are getting nowhere with this according to my SE.

[panwmod]

Jochristian,

I talked to my SE and he confirmed that there is a pending RFE matching the suggestion of mikand.

He added me to that request and wanted to link this thread there as well.

So no telnet, but a connectivity testing utility.

Thanks

Ulli

[faigner]

Any news on what is planned now and how long it will take to implement the "telnet alternative"? I'm missing it badly too!

[jochristian]

Telnet won't come back again according to my SE :smileyangry:

But still not a official answer on this...

Jo Christian

[BCH]

What a shame, that was really useful

[craymond]

I hope that they look at the functionality of tracetcp (Win32) or LFT (Linux).

[panos]

I want tcpdump for all interfaces

[ericgearhart]

Just throwing this one out there, but you can build a rule with specific source/destination traffic and then have the PA packet capture on that one specific rule:

I've used this and it works... it's kind of a "ghetto tcpdump" way of doing it. The packet captures show up in the Monitor tab with a green arrow next to them, just as though a Threat rule that had 'packet capture' turned on had matched.