About HULK

Could you please share/upload your firewall config in an xml file, so that I will test in my PA-200 FW and let you know the corrective action should be taken. Thanks ... View more

Thanks for your update here. If app-override solved the problem here, it means the PAN  FW was changing the payload information from the layer-7 which was not acceptable for your end server. Hence, your end server/call manager/PBX is a NAT aware box. This type of situation could handle in 2 ways: a. Make the end system, NAT aware and create an application-override in PAN firewall for signaling and media traffic. OR b. Make the server as a legacy device (no NAT aware) and do the pinholing at the PAN firewall. Hope this helps Thanks ... View more

Hello Vaibhav, Once you will delete a VSYS from PAN firewall, It will un-assign the VSYS information from the interface-configuration automatically. As per my knowledge, In case of Juniper SRX firewall, you need to manually un-assign the same settings individually from interfaces. Hope this helps. Thanks ... View more

Hello Sir, Is your end device Call server/PBX is NAT aware..? Is there a predict session available  from the signaling session...? I would suggest you to enable packet capture for ingress and egress on the PAN firewall just to see, the Layer-7 Payload and how it modified by PAN. Please find below few related discussions: nat Polycom Real Presence issue Thanks ... View more

Hello SIr, Please find below procedure to open Windows registry. Click on the Start button and then click Run.... In the search box, or Run window, type the following:regedit Thanks ... View more

---------------------------- Error: 2 Debug( 579): no flushdns key set (T16272) 01/14/14 19:19:59:382 Error( 126): Driver is not installed, reinstall it now! (T12768) 01/14/14 19:37:38:836 Debug( 276): Received session change, event type 7, session 1 ------------------------------ Hello Sir, I think the driver installation failure could be due to Insufficient system resources exist to complete the requested service. Hence, it's seems like, not related to GP, more like a local machine problem. The NET_LUID is the unique number that NDIS allocated for each network interface; it consists of the interface type paired with a unique number which is maintained in the following registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NDIS\IfTypes For example, you can find out Ethernet interfaces in the registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NDIS\IfTypes\6, within this key, you can find out registry key IFType with value 6 for Ethernet and registry key IfUsedNetLuidIndices which is a bitmap keeping track of the IDs that have already  been assigned; for example, if you see a value 0xFF 0x01, it means that you have 9 Ethernet interfaces since it has nine bits set; however if you see a bitmap of a list of number of 0xFF’s, it means that all the unique IDs have been allocated by NDIS and NDIS cannot allocate a new LUID for NetConnect virtual interface. So, please share the output/screenshots of IfUsedNetLuidIndices from that machine. Thanks ... View more

Could you please let me know the GP version..? It seems having problem on the REGESTRY KEY. Thanks ... View more

Yes, it will not cause any problem with the other cluster member, because, as per my understanding RAM is not a monitored object in HA. Thanks ... View more

Hello Mikand, You are correct, The new PAN OS 6.0 is having capability to decrypt TLS 1.2. Although PANOS 5.0, if we detect a TLS1.1 or TLS1.2 session, we first try to downgrade it to TLS1.0 and decrypt. If that fails, we won't decrypt the session and either drop the session or allow it encrypted based upon your policy settings. Thanks ... View more

Hello sir, Could you please follow below mentioned steps: > show system software status | match srvr >>>>>>>>> Need to verify the process ID for device-server and management-server. > debug software restart management-server > debug software restart device-server > show system software status | match srvr >>>>>>>>Need to verify the process ID ( it should be a different ID after restart ) #commit Please update the result, so that I could help you with the next troubleshooting steps. Thanks ... View more

Hello Sir, RAM is not hot swapable on PAN firewall. As Hparikh said, we have to reboot the device after the upgrade. Thanks ... View more

Hello Sir, As per my knowledge, PAN is not having an option like "replace-pattern" (use in Juniper Firewall) to make any changes, without deleting the same config from CLI. It might come with a future release. For the time being, you can collect all "set" command from the PAN  firewall as mentioned below: admin@PAN> set cli config-output-format set admin@PAN> configure Entering configuration mode [edit] admin@PAN# show Collect the output in a text file/notepad, and modify as per your requirement ( But need to delete the existing one). Thanks ... View more