About DennyChanditya

Hello, i have appliance Firewall PA-460. i do the testing power with this device.  i had read the docs below. Interpret the LEDs on a PA-400 Series Firewall (paloaltonetworks.com) Replace a Power Adapter on a PA-400 Series Firewall (paloaltonetworks.com)   I had several test below. 1. Place 2 adapter connect to firewall, its working normally. 2. Disconnect 1 adapter from firewall. No alarm shows/LED, in cli show adapter not inserted 3. Place 2 Adapter, but disconnect 1 adapter from power source. No Alarm, then in cli still show adapter inserted.   as i test above, the conclusion is the firewall doesn't check the voltage as the docs says. but in the cli only show the adapter is inserted/not (even the adapter has no power).   But the question is, how we know if the firewall had a power in each adapter? how to generate alarm if one of the adapter have no power? as the note below it says if the 2 adapter inserted and on adapter fail it will show the alarm, but as i test it not showing any error, in web ui or even in cli.     Thanks, Denny ... View more

We have problem with SMTPS configuration on Palo alto Firewall so we have the SMTPS Certificate and already inject to the firewall Our users says that the certificate is the certificate CA and when we test the email connection, the firewall shows error 'SSL Connect Error', we try on port 465 and using TLS 1.2   We have another brand network device, and the tac support on that brand said their device require the parameter 'extended key usage server authentication' in the certificate to setup the SMTPS.   Are in the palo alto firewall need this too in the certificate so we can config the SMTPS? or is there any docs about how to troubleshoot the certificate like this? Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended. ... View more

Hi,   i follow the docs here LIVEcommunity - PAN-OS SAML SSO with JumpCloud and Mobile Push MFA - LIVEcommunity - 493684 (paloaltonetworks.com) it works well with one firewall. When it used to HA active Passive Environtment, it wont work on the passive, the config sync from the active, but the configuration from Jumpcloud only setup for 1 IP Only.   is anyone here used Jumpcloud as the SAML for device login authentication? Is there other tips to work on saml auth on HA environtment? still trying on Radius Jumpcloud too, but i still stuck in the certificate. ... View more

Hello, i have question about PBF Using ECMP. We have 3 ISP and using ECMP Setting with weight round robin and Symetric Return Settings ISP A > 200 ISP B > 100 ISP C > 50   NAT we set like this All  User > ISP A   Using PBF for some IP Segment Segment A to ISP A Segment B to ISP B Segment C to ISP C   But we have some problem link below :  When we check the traffic monitor, we can see that IP Segment A is still Going to ISP B and ISP C When we disable ECMP, setting the ISP metric in virtual routing to 10,20,30, the Globalprotect only up for ISP that have a low metric. For some reason, some users can't access/maybe have a slower access to specific website. Security policy for now we set to Allow All.   Is there any solution to avoid IP Segment A going to ISP B and C using this ECMP Method? ... View more

Hello, i have palo alto with 2 ISP(A and B) and 1 internal connection i enabled the ECMP + simetric return and ecmp setting IP Modulo. my goal is, force 1 IP segment to ISP B to go to the internet   i already setting in PBF, using enforce return simetric but in the the traffic monitor, the user show incomplete application. i assume that it go into ISP B and dont go back to ISP B.   Is there any solution to solve this. ... View more