About PavelK

Hello @SeanDeHarris    to expand on Cosmin's answer. Strata Logging Service and Strata Cloud Manager have two different SKU. Strata Logging Service does not require Strata Cloud Manager, however Strata Cloud Manager Pro includes Strata Logging Service. Below is license comparison.   Strata Cloud Manager Licenses   Kind Regards Pavel  ... View more

Hello @Edsnow   below is the list of platforms supporting HW offload:   Reference: disable-hardware-offload.   You can confirm it from CLI:  show session info | match offloading  Reference: Disabling Session Offload to Record Traffic During Packet Capture.   There is a traffic log filter (offloaded eq 1) to confirm session offloading from logs (1 is offloaded, 0 is not offloaded), however at least in my case with PA-5260 it does not return any result even though I can confirm from CLI by looking into each session individually that it was offloaded. Reference: Traffic Log Fields.   Kind Regards Pavel    ... View more

Hello @nohash4u   thank you for message.   I agree that each of the KB is describing different issue and they do not seem to have any relation to each other. I think, the section of "Additional Information" from KB: "HA passive device keeps making failed PAN-DB cloud connection" should be removed to avoid confusion.   Kind Regards Pavel ... View more

Hello @M.Ahmed136397   thanks for posting.   Could you please confirm how you blocked it? Have you used URL Category "Social Networking" to block social media sites? Have you used app-id to block it? I can see that app-id update 8967 released on 17th April, had below metadata changes that might affected your application blocking.   3 facebook-delete (functional) collaboration social-networking browser-based metadata change modified Risk Score from 2 to 3 facebook-base   [Deleting], [Web App] yes no 8.1.0 3 facebook-invite (functional) collaboration social-networking browser-based metadata change modified Risk Score from 2 to 3 facebook-base   [Web App] yes no 8.1.0 3 facebook-reactions (functional) collaboration social-networking browser-based metadata change modified Risk Score from 2 to 3 facebook-posting   [Web App] yes no 8.1.0 3 facebook-rooms (functional) saas social-networking browser-based metadata change modified Risk Score from 2 to 3 and soc2, ip-based-restrictions flags as yes facebook-base, ssl, web-browsing   [Web App] yes no 8.1.0 1 youtube-livechat-posting (functional) media photo-video browser-based metadata change modified Risk Score from 2 to 1 and FEDRAMP, FINRA, HIPAA, PCI, soc1, soc2, ip-based-restrictions flags as yes youtube-livechat-viewing   [Posting], [Web App] yes no 8.1.0 1 youtube-livechat-viewing (functional) media photo-video browser-based metadata change modified Risk Score from 2 to 1 and FEDRAMP, FINRA, HIPAA, PCI, soc1, soc2, ip-based-restrictions flags as yes youtube-base   [Web App] yes no 8.1.0 1 youtube-tv-streaming (functional) media photo-video browser-based metadata change modified Risk Score from 2 to 1 and FEDRAMP, FINRA, HIPAA, PCI, soc1, soc2, ip-based-restrictions flags as yes youtube-base   [Entertainment Video], [Web App] yes yes 8.1.0   Kind Regards Pavel ... View more

Hello @azizislam   on the top of what Jay mentioned, I would recommend to check logs: less mp-log routed.log (KB for reference: BGP Not Working after MD5 Key is Changed) and for debugging with PCAP, I would refer to Tips & Tricks: Enabling Packet Captures to Troubleshoot Daemons.   Kind Regards Pavel   ... View more

Hello @CyberEye   could you please confirm PAN-OS version you are running? I have notice below addressed issue in PAN-OS 10.2.14 and 11.1.7.   PAN-267097 Fixed an issue where the replay database size increased significantly due to local and special configurations not being purged after commits.   Kind Regards Pavel ... View more

Hello @Jagdeep1   - Could you confirm you followed this procedure: recover-managed-device-connectivity-to-panorama for recovery? - Could you provide screen shot of logs what happens after log line with "device_registered no"? - Could you confirm what PAN-OS is running on FW and Panorama?   Kind Regards Pavel   ... View more

I came across this KB: During HA failover on PA-400 series firewalls, interface link-up will take a time on the new Active device where long failover time / outage during failover is similar to what is described in initial post. Maybe that was root cause.   Kind Regards Pavel ... View more

Hello @S.Ramesh960545   thanks for post.   The behavior you described looks like corresponding with below limitation.   PAN-192679 (PA-415 and PA-445 firewalls) The hardware can detect the presence of a power adapter but does not detect voltage or functionality. As a result, the firewall’s Alarm feature is unavailable to the power supply and is only raised when the device reaches temperature limits. Furthermore, the firewall does not display power supply details in system logs or the CLI. limitations-in-pan-os-11-1.   Kind Regards Pavel    ... View more

Hello @M.Bock   could you please check this KB: configd.log error - "useradd: invalid user name 'xxx'" and "Authentication profile not found for the user"  to see you are hitting this issue?   Kind Regards Pavel  ... View more

Hello @M.AbuBakar   I came across similar issue in the past. To isolate the issue, I would recommend below steps:   - Check syslog system logs from CLI: tail follow yes mp-log syslog-ng.log. - Take packet capture: How To Run a Packet Capture (tcpdump) On Management Interface and check reason for failure. For example retransmission time out or what side (server or firewall) is closing connection. - Can you see in the log re-establishing of syslog connection? - Are you using syslog over SSL?   Kind Regards Pavel   ... View more

Hello @din100   when you click on "Check Now" under: Device > Plugins, you should get a list of all plugins. From there you can install older plugin version.   Kind Regards Pavel ... View more