About HULK

Hello Emr, Since PAN OS 6.1.0 is very new in the market, it may take a few days to update this page. Generally, for software products and releases, the following End of Life policy applies: Software release 5.0 or after: -- Major feature releases will be supported for 24 months. --The last minor feature release of a major release cycle (see definition below) will be supported for 48 months. --Support includes technical support, bug fixes, maintenance releases, workarounds, and patches for critical bugs. Software release 4.1 or after: --Software releases will be supported for 12 months. --The last minor feature release of a major release cycle (see definition below) will be supported for 36 months. --At least one release in an 18-month time period will be supported for 36 months. --Support includes technical support, bug fixes, maintenance releases, workarounds, and patches for critical bugs. Reference link: End-of-Life Announcements Thanks ... View more

Hello Amit, PROXY ID's are required to define the SPI key's in the IPSec VPN. SPI is a key pair, used for encapsulation and decapsulation of ESP packet. CASE-1: Proxy ID's should be as mentioned below: CASE-2: You have to follow the DOC : Configuring route based IPSec with overlapping networks Reference Info:Re: IPsec VPN Tunnel with overlapping subnets. Hope this helps. Thanks ... View more

A similar discussion thread for your reference: PBF and failover Thanks ... View more

Hello, You may accumulate all required URL's under a custom URL category ( white list) and apply that on a no-capive-portal policy. Hope this helps. Thanks ... View more

Hello COS, It seems, above mentioned symptoms are matched with KB DOC: SSL connection failing between User-Id agent and PAN Could you please try below CLI commands and let me know the result: Reset the connection between the User ID agent and the firewall > debug user-id reset user-id-agent <userid/ all> Restart the userid daemon > debug software restart user-id Hope this helps. Thanks ... View more

Hello COS, Could you please let me know the PAN OS version running in your FW and also share CLI command output > show system resources. Thanks ... View more

Hello Mbs, It would be better to open a ticket with Palo Alto TAC. They will identify, why the route information is not being pushed, even after a successful commit. You may update below mentioned CLI output ( during commit) for a deeper analysis here too . > show system resources | match mprelay > tail follow yes mp-log routed.log Thanks ... View more

Thank you SDorsey. ... View more

Hello MBS, AS per my understanding, this behavior is not expected on a PAN firewall.Do a show jobs all to see if the commit itself went fine? Check show system resources for mgmtsrvr, devsrvr and routed and notice if one of them is abnormally high. If possible, try restarting the management server and routed process > debug software restart management-server > debug software restart routed Thanks ... View more

Hello ClintL , Could you please go through this DOC, it might give you the detail working flow for PBF with failover: How to Configure ISP Redundancy and Load Balancing Thanks ... View more

Yes, PAN does not have aux port, where you can connect that modem. Thanks ... View more

Hello jmcnemar, Even if PAN doesn't have an option for IP range to build up a custom report ( FR 1475), but looking at your requirement, it can be achieved by a subnet filter ( as mentioned by ssharma), since you are trying to use a subnet here 192.168.61.0/24 192.168.61.1--- 192.168.61.100 --- this type of range is not supported 192.168.61.1-192.168.61.254= 192.168.61.0/24 ---- this is supported Hope this helps. Thanks ... View more