About PavelK

Thank you for quick reply @Muruganandham.SP    Sorry if I ask silly question, but based on your screen shot, the destination IP address is: 127.0.0.1 which is reserved loopback IP address. It looks like it is sending logs to itself?   Kind Regards Pavel ... View more

Thank you for posting question @howardtopher   Could you go to Device > Setup > Aux-1 / Aux-2 and make sure that these interfaces are enabled? In order the Aux-1 / Aux-2 interfaces to be enabled the IP setting has to be configured. After this, please run SNMP Walk again.   Kind Regards Pavel ... View more

Thank you for your post @Muruganandham.SP   Since passive Firewall is not passing any traffic, you will not see any Traffic Log, Threat Log,.. etc, however System Log as well as Configuration Log will be generated and if configured correctly sent to external syslog server.   Since you mentioned that configuration is identical and active Firewall is sending logs to external syslog server as a next thing I would check settings that are not HA synchronized, for example DNS server IP address. If you have configured Syslog as FQDN make sure that passive Firewall can resolve the IP address. Also check System logs to see any related events: ( eventid eq syslog-conn-status ).   Kind Regards Pavel ... View more

Thank you for posting the issue @Jose_Espinoza   Could you please post full failure error? Typically the error message gives further details what prevented validation to succeed. You can re-call last failure from Panorama > Managed Devices > Summary > [Firewall Name] > Shard Policy Last Commit State / Template Last Commit State.   Kind Regards Pavel ... View more

Thank you for the post @FarhanKoujalgi    I can only speak for my own experience. What I have been seeing in the past, when Firewall reaches 95% of disk usage, there is this system log generated: "Disk usage for / exceeds limit, 95 percent inuse, cleaning filesystem". This is maybe what your customer is experiencing. When this alert continues, this indicates Firewall is not able to delete some unused files to clear space. In this case, I will go through below procedure to clear unused files manually:   delete debug-log mp-log file *.1 delete debug-log mp-log file *.2 delete debug-log mp-log file *.3 delete debug-log mp-log file *.4 delete debug-log mp-log file *.old delete content cache old-content delete debug-log dp0-log file *.1 delete debug-log dp0-log file *.2 delete debug-log dp0-log file *.3 delete debug-log dp0-log file *.4 delete debug-log dp0-log file *.old delete debug-log dp1-log file *.1 delete debug-log dp1-log file *.2 delete debug-log dp1-log file *.3 delete debug-log dp1-log file *.4 delete debug-log dp1-log file *.old delete debug-log dp2-log file *.1 delete debug-log dp2-log file *.2 delete debug-log dp2-log file *.3 delete debug-log dp2-log file *.4 delete debug-log dp2-log file *.old delete debug-log cp-log file *.1 delete debug-log cp-log file *.2 delete debug-log cp-log file *.3 delete debug-log cp-log file *.4 delete debug-log cp-log file *.old   I have been through upgrades from 9.X to 9.1 many times in the past and never run into issue with disk space, however when Firewall was reporting issue with disk usage, I cleared unused files manually before the upgrade. Here is one KB link with useful tips: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaJCAS   Kind Regards Pavel ... View more

Thank you for reply @rajumaharjan    Could you try to restart management process: debug software restart process management-server then run the PDF export again?   Note: By restarting management process it will through you off from CLI and GUI, but you can re-login again after a minute.   Kind Regards Pavel     ... View more

Thank you for reply @Oblagonte   Based on your description there might be an issue with log collector on your active Panorama node.   Could you please confirm from CLI when you experience the issue the status of Elastic Search:  show log-collector-es-cluster health Could you also confirm from CLI incoming log rate: show log-collector detail Please also check whether you see any crash files: show system files   What is PAN-OS version of Panorama?   Thank you Pavel   ... View more

Thank you for the post @rajumaharjan   Do you mean this PDF Export option? Does the progress bar finishes while generating report?   Kind Regards Pavel     ... View more

Thank you for the post @Oblagonte   Could you please elaborate more on this issue? Do you mean that traffic log query is slow? Could you please give more details regarding your Panorama model (VM or Physical Appliance) and deployment mode (Local Log Collector or Dedicated Log Collector)? When this issue is happening, could you get an output from Panorama from: " show system resources"?   Thank you Pavel ... View more

Thank you for posting question @holmegan   If you would like to address an issue with different version of browsers and you are managing those clients, then there might be more elegant solution. For example to use an end point management to address this issue.   If you are going to leverage Firewall for this task, then closest match I can think of for your requirement is to create a Custom Application or Vulnerability Signature, then match version in HTTP header, then link it to a policy to block it.   Below are examples by using Custom Application as well as Vulnerability Signature:   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClEdCAK https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClSOCA0   Note: In either case, you will have to enable decryption to get visibility into HTTPS traffic.   Kind Regards Pavel   ... View more

Thank you for reply @waqasumar1 PAN-OS  8.1 will have the same behavior.   Kind Regards Pavel ... View more

Thank you for posting question @waqasumar1   After Threat license expires there is no impact to traffic nor policies. Firewall will only not be able to download new signatures: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/subscriptions/what-happens-when-licenses-expire.html   Kind Regards Pavel ... View more