About licenselu

Hello,   One of our customers moved from Checkpoint to PA and he's complaining about advanced search in the security rulebase. For example, he would like to search for and IP (source) with is used in an Address object or in an Address Group Object and with destination port 22 (example). If I put, for example, 192.168.1.0 in the search bar, the system it able to search for any reference (object name, ip address) in the entire config file to match that value. If then I add (service/member eq 'service-ssh-tcp-22'), the system returns... all the rules !   How can I performs advanced seach in the policy tabs ??   Regards,   HA ... View more

Hi all,   I have some questions about integration between PA firewall and Panorama. In my scenario, there's one cluster of PA devices and only one Panorama device. The firewall policies were imported from the cluster into Panorama (Pre-Rules in the Device group). I performed some changes on policies and pushed them back to the cluster. Until now, everyhting is OK... After pushing, all policies are greyed out on the firewall (and marked as read only)...   So... what's happen if the connectivity is down between Panorama and the cluster ? Can I still add/remove/change policies locally on the firewall itself ???   Once Panorama is UP again, can I import the change made locally to Panorama ??   Regards,   HA   ... View more

Hello,   One of our customer wants to implement VSYS. Currently, the current firewall is Checkpoint appliance (around 900 rules).. The idea is to replicated the config from the Checkpoint to the PA with only one VSYS to avoid a big bang... So I will create all zone (in the only one VSYS in the beginning) and policy between zone. Until now, everything is OK...      The next phase will be to the divide the initial VSYS to 3 or 4 VSYS (only on routing table for all VSYS). It seems it's not possible to move zone (and thus policies) between VSYS (interface/subinterface can be moved) when its' created...   So does it mean I need to recreate zone and policies in the new VSYS ? PS: I known that the destination zone will change because the destination zone will be in another VSYS...    Any idea to eliminate the needs to recreate zone and policies and to avoid granular rulebase review everytime we add a new VSYS...   Regards,   HA ... View more

Hi all,   Does anybody have experience with new PA series ? Commit time ? Memory on the MGMT plane ? CPU (core, etc) , SSL ASIC ?   Regards,   HA  ... View more

Hello,   I'm using GP 3.0.2 on a Win7 PC (PAN OS 7.1.2). I'm getting error 'Gateway x.y.z: Protocol error. Check server certificate.' error message. I have already reinstalled  the client on my computer. Same error message. My colleguea, using WIN 10, can connect without any problem. Using Dual Factor Authentication (Vasco and LDAP). Both authentication are sucessfull in the logs.   What can I do ??   Regards,   HA ... View more

Hi all,   Any info about Firestorm bug and Palo Alto Firewall ?? http://www.bugsec.com/news/firestorm/   Regards,   HA   ... View more