About HULK

When you have applied the commit button, it was successfully commitedthe changes..? Thanks ... View more

Hello ITSama I have seen issue when a File Blocking profile is configured to block the .zip files, it also blocks the .jar files. But, it should not identify as a PE. You may enable a flow basic with content ID enabled (CTD) for more detail information, else open a ticket with support for the root cause analysis. Thanks ... View more

Hello Tician Could you please check the predict session on this firewall for that FTP connection. I think, the PAN is unable to open the pinhole for the new connection on port 35829. a similar discussion thread: Re: About ftp passive mode App-ID insufficient-data Thanks ... View more

Add to it: In case of a commit pending or failure, you may also see detail information about the failure reason. > show jobs all Enqueued                     ID             Type    Status Result Completed -------------------------------------------------------------------------- 2015/02/03 10:34:24        1900         WildFire       FIN     OK 10:34:28 2015/02/03 10:34:20        1899          Install       FIN     OK 10:34:24 admin@34-PA-3020> show jobs id 1900 Enqueued                     ID             Type    Status Result Completed -------------------------------------------------------------------------- 2015/02/03 10:34:24        1900         WildFire       FIN     OK 10:34:28 Warnings: Details:Configuration committed successfully Successfully committed last configuration Thanks HULK ... View more

Which PAN OS is running into this Firewall.? Thanks ... View more

Hello Mandar, You may enable packet capture for those DHCP initial messages, as mentioned below. Configure the first dataplane packet-diag filter to capture DHCP Discover, DHCP Request, and DHCP Inform packets. This filter will capture UDP traffic on source port 68 (bootpc) and destination port 67 (bootps). > debug dataplane packet-diag set filter match protocol 17 source-port 68 destination-port 67 Configure a second dataplane packet-diag filter to capture DHCP ACK, DHCP NACK, and DHCP Offer packets. This filter will capture UDP traffic on source port 67 (bootps) and destination port 68 (bootpc). > debug dataplane packet-diag set filter match protocol 17 source-port 67 destination-port 68 Enable pre-parse match.  This is necessary to collect DHCP packets destined for the DHCP Client interface. > debug dataplane packet-diag set filter pre-parse-match yes Enable the packet filter. > debug dataplane packet-diag set filter on Configure Packet Captures on the transmit, receive, and drop stages to collect DHCP packets. > debug dataplane packet-diag set capture stage drop file dhcp-drop > debug dataplane packet-diag set capture stage transmit file dhcp-tx > debug dataplane packet-diag set capture stage receive file dhcp-rx Packet capture is enabled You are set to capture DHCP Client traffic once traffic is generated generated.  Upon completion, be sure to disable (in the following order) packet captures and packet filters. Run the following commands: > debug dataplane packet-diag set capture off Packet capture is disabled > debug dataplane packet-diag set filter off debug packet filter: off OR, do the same from PAN GUI. ** Please mark my answer as correct/helpful if appropriate.** Hope this helps. Thanks ... View more

Hello gabrielhill, Could you please let me know the teamviewer version currently you are using here..? I have seen issue with version 9, because of the way they encode their traffic. Thanks ... View more

Hello sean_haller, I would also suggest you to validate your requirement first, before implementing A/A setup. Q: When do you need A/A?   A: When you have asymmetrical traffic or you need to pass traffic thru a secondary path. Q: What is our A/A definition?   A: Provides full layer 7 inspection in environments with asymmetric routing. Q: Does A/A double my thru put?   A: No, we do not combine the cpu power of both devices for packet handling. The session table of both devices equal one device. Q: Are we a true load balancer?   A: No, we perform load sharing, but the load distribution is handled by the routing infrastructure around us. Packet handling is determined by the firewall that receives the first packet. Hope this helps. Thanks ... View more

Hello Mandar, "shutdown': False"  represent that, there was no incident ( system shutdown) happened because of the thermal condition and the "Alarm=False". Hope this will give you a better clarity. Thanks ... View more

A similar discussion in the forum: High Availability across a Fibre connection NOTE: If you use Cisco switches, disable IGMP snooping. This is not required but it's just an advice. Hope this helps. Thanks ... View more

Hello Mandar, I hope, you took this CLI output from a PA-200 firewall. "false" mean, there are no alarm currently activated. If any incident/alarm is not active then the firewall will show as "false". A PA-200 firewall is having one physical dual-core CPU, that represent through "6220 Core".  For Example, if you apply the same command on a PA-3000 FW, you will be able to see CAVIUM, OCELOT, INTEL etc. The average value will be calculated based on multiple sample(3 sample mostly) taken within a small time interval, For your better understanding, ihave given an example of 2 CLI command 1. >show system state filter env.* | match thermal   and >> show system environmentals Hope this helps. ** Please mark my answer as correct/helpful if appropriate.** Thanks ... View more

Hello Ascit, I am not clear, what you want to achieve. HTTP header is not having a field for user. Could you please explain your requirement here in details. Check out this discussion thread: Re: Captive portal, manage authenticated users Thanks ... View more

You may open a support ticket to validate this information. what URL DB you are using now..? Thanks ... View more

Hello Daisuke, If you are trying to apply the new GP version for a large audience, then install the new GP agent versiononthe PAN FW first and then set the Agent upgrade option as "transparent". For a single machine, you may install from the MSI file. In case of any issue, you may try to restart the GPS service on your windows machine and try once. Thanks ... View more

A similar document/discussion Re: Wiping out any changes in candidate config : Configuration Log Entry Not Generated for 'Revert to running configuration' Action Thanks ... View more