About PavelK

Hello @RobertShawver   I do not think this is publicly documented anywhere (At least I have not found it). By looking into what I have in Firewall, it looks like a single user account has a red icon and a group has a green icon:    Kind Regards Pavel ... View more

Hello @AbdulAzim   as first thing, I would try to restart management process, then try again to generate TSF. Here is KB: How to Restart the Management server "mgmtsrvr" Process.   Kind Regards Pavel ... View more

Hello @limmengkiat   yes, this is correct. It will only update list after pressing "check now".   Kind Regards Pavel ... View more

Hello @limmengkiat   unlike Antivirus, Applications and Threats... under dynamic updates the software download does not have any configurable schedule to check and download a PAN-OS image. To get latest list of available PAN-OS images you will have to press "Check Now" located in the bottom left corner. After you press "Check Now", you should see a complete list.   Kind Regards Pavel ... View more

Hello @Sawittree @Curtess_Samuels    this defect seem to be resolved in PAN-OS 10.1.11 released this week:   PAN-179888 Fixed an issue on Panorama where the number of managed firewalls Power Supplies did not display a correct count.   Kind Regards Pavel ... View more

Hello @Alpalo   thank you for reply.   Could you confirm that passive Firewall has all required certificate / certificate chain used in certificate profile? Could you check what authentication logs say in passive Firewall when authentication fails: tail follow yes mp-log authd.log?   Kind Regards Pavel ... View more

Hello @CoreyErlingerFord    this issue seems to be fixed in PAN-OS 10.1.11 that was just released:   PAN-179888 Fixed an issue on Panorama where the number of managed firewalls Power Supplies did not display a correct count.   Kind Regards Pavel ... View more

Hello @Jason_Lieberman   you can exclude deviating device logs by placing: !( eventid eq 'deviating-device' ) in the Filter field under: Panorama > Log Settings > System > [Profile Name].   Kind Regards Pavel   ... View more

Hello @yurisilva   thank you for reply.   Could you check system logs from Monitor > Logs > System to see any traces where Panorama still comes to picture? For example you can use this filter: ( description contains 'Panorama' )   Kind Regards Pavel ... View more

Hello @netmart   thank you for reply.   The application incomplete is expected in this case, there is no return traffic (Packet Received is 0):     As next, I would be looking into why there is no response. If you have access to server, I would check server side.   Kind Regards Pavel ... View more

Hello @netmart    the intrazone-default has action allow by default. The application incomplete indicates that either server did not reply or there was not enough traffic to recognize the application. Here is KB for reference: Not-Applicable, Incomplete, Insufficient Data in the Application Field. To drill down into details, could you check logs from Monitor > Logs > Traffic, then search the log and click on magnifying glass on left side, then navigate to Details and check Bytes Sent & Bytes Received. If there is no Bytes Received this would indicate no response from server.   Kind Regards Pavel ... View more