About HULK

Hello Dan, Could you please let us know the content and anti-virus versions running on your PAN firewall. There is a BUG open to track this issue: "Bug 62775 - Commit warning on content version 425 for threat 40026 if it has any exceptions enabled". Hence, if your device running content version 425, i would suggest you to upgrade the content and anti-virus versions to the latest available database. Hope this will fix the problem. Thanks ... View more

Hello Aaputis, As per my knowledge, there is no document available which will provide you the exact latency during a failover, rather with optimal time best practice. Few related links: Re: HA failover time Layer 3 High Availability with Optimal Failover Times Best Practices High Availability Failover Optimization Thanks ... View more

> show config audit version ? > show config saved ? admin@DADA# load config + key          key > from         Filename > last-saved   Last saved configuration > partial      partial config loading > version      Version ... View more

Hello RudTor, I am sorry, in my case there was a any any=Allow policy and that is why it was not showing any warning. Now i am also getting the same warning message. Thanks ... View more

Hello RudTor Could you please let me know  the PAN-OS and Application database  version running on your device. I am using PAN OS 6.0.1 and not getting any warning, even if i have only gmail-base and ssl application added into the policy. ( As per my knowledge, 5.0.x onwards the warning message will not appear during commit) FYI: Thanks ... View more

Hello RudTor, This is expected. If you make a security policy to allow only web-browsing and ssl, then gmail-base traffic will be dropped. Once you will add Application=gmail-base on that security policy, you can safely ignore the dependency warning for smtp, pop3 and imap. Thanks ... View more

Hello RudTor, There is different way to access gmail. 1. Through a web-browser. 2. Through imap, smtp, pop3 mail client ( Example-microsoft outlook) To access through browser, only ssl ( for https://gmail.com --- port 443) and web-browsing ( http://gmail.com----port 80) will be enough as a dependent application. Need not to allow all dependent applications unless you are using it. Explain your customer, if he only wants to access gmail through a browser, then he can allow SSL and web-browsing application along with gmail-base. He can safely ignore the dependency warning for smtp, pop3 and imap. Here is an example, while i am accessing https://gmail.com through a browser. Hope this helps. Thanks ... View more

Hello Peri, I would prefer the option 1, even though all devices are having independent configuration. The benefit is, if at any point of time you replace a firewall in your network ( one FW went down and replacing with a new one), then you can easily push all config from Panorama. FYI: a helpful doc How to Import Palo Alto Networks Firewall Configurations into Panorama Thanks Subhankar ... View more

Hello, I don't think, there is any option to clear custom logs for a specific date. If traffic logs is very important for your environment, you can increase the traffic log space ( quota ) on your firewall. Device > Setup > Logging and reporting setting. Thanks ... View more

Hello Sir, You can clear the logs from GUI, under Device >> Log Settings >> Manage Logs. Thanks ... View more

Hello, It it your production firewall or a test FW..? Thanks ... View more

Hello Sir, Could you please check the session details with below mentioned command: admin@PA-vm> show session id 37676 >>>>Then verify the session  start time. Clear the session     admin@PA-vm> clear session id 37676 Again, verify the same session ID: admin@PA-vm> show session id 37676 >>>>>>> check session start time, if this is showing the same start time. Try to clear the same session from the session browser and let us know the result. Thanks ... View more

The Activation codes ( AUTH CODE) are given for a specific serial number. But, you can use it on a different serial  number ( same device type). Thanks ... View more

Hello Slawek, Yes, your policy configuration is looking good here. Could you please let me know, how did you generate that "TOP blocked user bahavior" report...? Thanks ... View more