About HULK

Hello Gmoss, If you have a valid support contact with PAN ,Please login into https://support.paloaltonetworks.com/ and go to Case-Management. There you can create a  new support case. OR Please drop an email to support@paloaltonetworks.com. Thanks ... View more

Hello Bryan, What do you mean by " the IPsec tunnel does come up and need to manually start the IPsec ( via CLI )". --- Is the Phase-1 is coming UP but the phase-2 is not..? or ---- Both Phase-1 and 2 is coming UP but traffic is not flowing through it. Could you please share the CLI command you are applying here. Thanks ... View more

Hello DimitrisK, Would it be possible for you to share the custom app configuration and other details ( screen-shots). We need to see, why it is not going through the appropriate policy. Once the traffic will go through the override policy, then we would be able to compare the performance. Thanks ... View more

Hello Gmoss, Yes, you are correct. If you add a threat exception, that means, for the time being you  wouldn't be protected. But, you always have an option to open a support case and provide detail information to modify the database in future release. Secondly, there is no option to add exempt ip address on "Anti-Virus" profile. That option is avilable for "Vulnerability-profile". FYI: Hope this helps. Thanks ... View more

Hello Sir, To access migration tool community, you need permission. I would request you to contact your PAN SE to get permission for migration tool community. Then you can download the tool in this community. Thanks ... View more

Hello Johan, As per my understanding, you will not be able to segregate only disabled rule from the GUI search option. Rather, you can enable "Highlight unused rule" option, it will show you all disabled rule including any other active rule, currently not being used. But, from the CLI, you can find out all disabled rule by below mentioned command: admin@DADA> set cli config-output-format set admin@DADA> configure Entering configuration mode admin@DADA# edit rulebase security [edit rulebase security] admin@DADA# show | match "disabled yes" set rulebase security rules test-1 disabled yes   >>>>>>>>>>>>>> Rule test-1 is disabled set rulebase security rules rule2 disabled yes  >>>>>>>>>>>>>>> rule2 is also disabled GUI: Hope this helps. Thanks ... View more

Hello Pronoy, You have to follow DOC: How to do a Factory Reset in PAN-OS 4.1 and 5.0In order to bring the firewall into factory reset. Thanks ... View more

Hello Markus, If you configure a custom Application for any specific reason.  The signature would not be existed in PAN App-ID database. That's the common reason to skip layer 7 inspection. Thanks ... View more

Hello Javith, It looks like PAN FW is connected with a Modem and that modem connected with ISP. There could be many reasons, while traffic was not through . Hence i would suggest you below mentioned steps to narrow down the problem, if packets are getting dropped at PAN FW: ------ Verify the ARP table, there should be a valid entry for the next hop ISP router. ------  Check if firewall is building new sessions for incoming traffic. Make sure the firewall not reached to the max limit. CLI command >show session info >show session meter ------  Verify the real time session in the CLI by using '>show session all filter source IP_ADD_OF_THE_TESTING_PC destination IP_ADD_OF_THE_DESTINATION'. ------ Verify the available resources on the PAN firewall > debug dataplane pool statistics > show running resource-monitor >debug dataplane memory status ------ Verify the global counters, if a specific "DRP" counter is increasing rapidly. The command show counter global provides information about the processes/actions taken on the packets going through the device;  These counters are for all the traffic going through the device and are useful in troubleshooting issues; like poor performance, packet loss, latency etc. It is advised to use the command show counter global filter packet-filter yes delta yes in conjunction with filters to obtain meaningful data. For more information, you can follow the DOC: What is the Significance of Global Counters? >show counter global filter delta yes >show counter interface all >show statistics ----- If above mentioned steps, doesn't throw any clue, then you can enable FLOW BASIC feature to understand the exact reason behind the failure: ( If packets are getting dropped at PAN FW) > debug dataplane packet-diag clear all > debug dataplane packet-diag set filter match source  IP_ADD_OF_THE_TESTING_PC destination IP_ADD_OF_THE_DESTINATION > debug dataplane packet-diag set filter match source IP_ADD_OF_THE_DESTINATION destination  IP_ADD_OF_THE_TESTING_PC > debug dataplane packet-diag set log feature flow basic > debug dataplane packet-diag set log feature tcp all > debug dataplane packet-diag set filter on > debug dataplane packet-diag set log on ~~~~~~~~~~~~~~~~ Initiate traffic through the PAN firewall/try to browse a website ~~~~~~~~~~~~~~~~~~~~~~~~~ > debug dataplane packet-diag set log off > debug dataplane packet-diag aggregate-logs > less mp-log pan_packetdiag_log.log For more information, you can follow the DOC: Packet Capture, Debug Flow-basic and Counter Commands Hope this helps. Thanks ... View more

Few more videos, which might help you for initial setup: Video Link : 1234 Video Link : 1006 Video Link : 1014 Video Link : 1015 Video Link : 1317 Video Link : 1379 Video Link : 1008 Video Link : 1504 Video Link : 1550 Hope this helps. Thanks ... View more

Sure. Please update here, if you need further information. Thanks ... View more

Hello Satish, FYI: How to Configure GlobalProtect GlobalProtect Configuration Tech Note Hope this helps. Thanks ... View more