About HULK

Hello Satish, Is it causing any issue in your PAN firewall...? Thanks ... View more

Hello Fahad, Could you please check the management-server logs on your PAN firewall. Thanks ... View more

opps, i misunderstood the issue.  Could you please check the session details for those traffic. is the application is being identify correctly..? ... View more

Hello Satish, You may follow the ms.log during the update, in case of any error. Thanks ... View more

Hello COS, XML API would be a perfect option for this scenario. I have taken an example from my LAB firewall: /api/?type=op&cmd=<request><license><info></info></license></request> Output: This XML file does not appear to have any style information associated with it. The document tree is shown below. <response status="success"> <result> <licenses> <entry> <feature>WildFire License</feature> <description> WildFire signature feed, integrated WildFire logs, WildFire API </description> <serial>XXXXXXXXXXXX</serial> <issued>January 07, 2015</issued> <expires>January 07, 2016</expires> <expired>no</expired> </entry> <entry> <feature>GlobalProtect Gateway</feature> <description>GlobalProtect Gateway License</description> <serial>XXXXXXXXXXXX</serial> <issued>January 07, 2015</issued> <expires>January 07, 2016</expires> <expired>no</expired> </entry> <entry> <feature>GlobalProtect Portal</feature> <description>GlobalProtect Portal License</description> <serial>XXXXXXXXXXXX</serial> <issued>January 07, 2015</issued> <expires>Never</expires> <expired>no</expired> </entry> <entry> <feature>BrightCloud URL Filtering</feature> <description>BrightCloud URL Filtering</description> <serial>XXXXXXXXXXXX</serial> <issued>January 07, 2015</issued> <expires>January 07, 2016</expires> <expired>no</expired> </entry> <entry> <feature>Threat Prevention</feature> <description>Antivirus, anti-spyware, vulnerability protection</description> <serial>XXXXXXXXXXXX</serial> <issued>January 07, 2015</issued> <expires>January 07, 2016</expires> <expired>no</expired> </entry> </licenses> </result> </response> You may follow this KB doc for more detail info: PAN-OS and Panorama XML API Reference Guide 6.0 Thanks ... View more

Could you please check the certificate common name is an IP address or a FQDN. For example,  If the certificate is having IP address in the CN, you have to connect with IP from the GP client. Otherwise it will show you a certificate warning. Thanks ... View more

Hello faust, No specific issues have been identified so far with IPSec. It's a good  stable OS. Thanks ... View more

Hello dschuemann Setting the session owner and the setup device to be the primary device is not recommended since all traffic processing will be performed by the active-primary device. However, for the sake troubleshooting and capturing logs and pcapsit can be useful to set the session owner and setuptoprimary since the packet processing will not be split between the devices in the cluster. For all other purposes the recommended setting is to use “First Packet” for session owner and “IP modulo” for session setup. I would recommend you to follow the DOC for more detail info: Configuring Active/Active HA PAN-OS 4.0 Hope this helps. Thanks ... View more

Hello Adrian, It looks, the server response is matchingwith PAN firewall's signature database. The direction of the Vulnerability is showing "server-to-Client". You may check the details of those individual threatID from: https://threatvault.paloaltonetworks.com/ A reference document for threat log direction Threat Logs Show Inverted/Reversed Direction for Source and Destination IP Addresses Hope this helps. Thanks ... View more

Hello CRA, Could you please let me know if you have configured any "file blocking" profile in the security policy. The file blocking profile might be set the action to "alert" for ms files. The wildfire should show action as forward”  “wildfire-upload-success” or “wildfire-upload-skip”. Refer below document for more detail: How to Configure WildFire Hope this helps. Thanks ... View more

¿podría comprobar los registros de amenazas en su firewall PAN (de CLI) , si los hay " intentos fallidos SSH " registro . Se va a crear un archivo btmp grande en / var / log / . Puede que tenga que ponerse en contacto con PAN suppport obtener acceso raíz del firewall sartén y eliminar ese archivo. Comando de la CLI : > show log threat direction equal backword Espero que esto ayude . ... View more

You are welcome Mel ... View more