About HULK

Give me some time to test and i will update you soon. Thanks ... View more

Hello Sir, I would recommend you to verify the management-plane resources utilization on that PAN firewall. > show system resources follow See management-server, log-receiver, device-server CPU and memory utilization. > show logging-status > debug log-receiver statistics Sample output: Please apply the above mentioned CLI command multiple times and  verify if those counters are incrementing. Logging statistics ------------------------------ ----------- Log incoming rate:             0/sec Log written rate:              0/sec >>>>>>>>>>>>>>>> Corrupted packets:             0 Corrupted URL packets:         0 Logs discarded (queue full):   0 >>>>>>>>>>>>>> Traffic logs written:          4  >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> URL logs written:              0 Wildfire logs written:         0 Anti-virus logs written:       0 Spyware logs written:          0 Attack logs written:           0 Vulnerability logs written:    0 Fileext logs written:          0 URL cache age out count:       0 URL cache full count:          0 URL cache key exist count:     0 If you observe,"traffic log written" counter is incrementing but still unable to see logs from GUI, then follow below mentioned command. > debug software restart log-receiver > debug software restart device-server > debug software restart management-server It would not impact to the production traffic through this PAN firewall. Hope this helps. If you have any further questions or inquiries, please update here. Thanks ... View more

Hello Sir, The Filters will be provided through content updates as they become available. At this time, there are not any pre-defined Filters so you would need to manually create them. Thanks ... View more

Hope for the best. ... View more

Hello Sir, We can fetch the same information from root# of the firewall: Please find below, It's a common Unix command Example: [root@PAN-FW scsi]# pwd /proc/scsi [root@PAN-FW scsi]# cat scsi Attached devices: Host: scsi1 Channel: 00 Id: 00 Lun: 00 Vendor: ATA      Model: WDC WD800JD-55MU Rev: 10.0   Type:   Direct-Access                    ANSI  SCSI revision: 05 [root@PAN-FW log]# pwd /var/log [root@PAN-FW log]# cat dmesg  As root access is restricted to end customers, hence i would request you to call PAN support to get the same information from your box. Hope this helps. Thanks ... View more

Have you tried deactivating that rule >>> commit and activate again >>> commit. ... View more

Hello Sir, While you are applying a commit on this firewall, it should show the "rule name" along with the warning messages. Example:: Rule 'XYZ' application dependency warning: Application 'ms-lync-base' requires 'kerberos' be allowed, but 'kerberos' is denied in Rule 'DenyAny' Application 'ms-lync-base' requires 'sip' be allowed, but 'sip' is denied in Rule 'DenyAny' Application 'ms-lync-base' requires 'soap' be allowed, but 'soap' is denied in Rule 'DenyAny'    Could you please verify that rule once. If that rule is not having an application "MS-LYNC" added, then do a "commit force" from CLI else, Deactivate that rule >>> commit and activate again >>> commit. Hope this helps Thanks                                                          ... View more

Hello Sir, Please find below the discussion on PAN-OS 6.0.0 and as ericgearhart said before, we are still developing PAN-OS 4.1.( 4.1.16) and 5.0 ( 5.0.11) also. ? Hope this helps. Thanks ... View more

Hello Cheon, This is an expected behavior. We need to bring the device into non-functional (in case of HA) in order to change the URL-DB. Thanks ... View more

It's looking like the log-receiver process was restarted during the commit and started populating logs again. As an addition advice, whenever you will face such an issue, please take a look at the devsrvr ( device server) , logrcvr ( Log receiver), mgmtsrvr ( management server) CPU and memory utilization etc. Thanks ... View more

For PA 5000 Series platform, you can try with CLI command: > show system raid detail Thanks ... View more

First of all, we need to identify which CPU is high,  MP CPU (management-plane) or DP CPU (data-plane)...? The above documents will help you for MP-CPU. From the GUI of the PAN firewall, if you go to Dashboard >> @ bottom left corner, it will show you the CPU utilization. Example: NOTE: To understand DP CPU, you can apply below mentioned CLI commands. CLI> show running resource-monitor CLI> show session info CLI> show session meter CLI> Debug data-plane pool statistics CLI>> show counter global filter delta yes  >>>>>>>> Run this command 10 times with a 5 sec interval. Hope this helps. Thanks ... View more