About PavelK

Hello @pattarachaiKH   is old log collector still registered in Panorama manager? If your old log collector is still registered you should still be able to see old logs even though all new logs are being sent to new log collector.   Kind Regards Pavel ... View more

Hi All,    I have PA850 and with the same issue with PANOS 10.2.7, the ACC only display for "last 7 days" time frame and no less. its little annoying, that you are trying to fix something with upgrading the PANOS and something else is breaking.  at the beginning, my ACC was not showing while using specific IP filtering 10.1.10, I upgraded to 10.2.5 and clientless portal broke. Now I upgraded to 10.2.7 to fix all of those and return to this ACC issue.      ... View more

You could create a custom app for it. I've never done a capture to see what it looks like but you can use wireshark on an endpoint or use the native capture tools to inspect the traffic and create an app. ... View more

true, good point.  They had so many addressed issues in 11.0.3, they forgot that one 😂 ... View more

Hello @sambillings459   thanks for post!   Since your Firewalls are managed by Panorama you should perform this change by Panorama by going to Templates > Device > [Select Template from drop down list] > Setup > Services. Once you change NTP servers to new IP addresses/FQDNs, commit and push to manage Firewalls. Select both Firewalls in HA while pushing it. The change will be performed by Panorama on both Firewalls in HA.   I would avoid making this change locally by overriding Panorama pushed configuration. Local configuration will not be synced back with Panorama. Local change also defeats purpose of Panorama.   Kind Regards Pavel ... View more

Hello @rhunziker   thank you for reply.   Could you confirm that trial license has been deleted from Firewall? Here is KB: How to Delete Active or Expired purchased and Trial Licenses from Firewall. Also do you see expired license in CSP under: Products > Devices? If yes, could you deactivate that license?   Kind Regards Pavel ... View more

Thank you sir for the link, please mark it as a solution. ... View more

Hello: We are facing similar issue, our use case matches with: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004NOKCA2&lang=en_US%E2%80%A9 I hope this helps. Regards.   ... View more

Hello @GBowman   I am not using Prisma SD-WAN, therefore can't do a test with actual equipment, however by looking into documentation: Configure a DHCP Server it looks like that to pass URL as an option the type should be a text. You configured type IP address with a string for URL as option which is probably not compatible. Could you refer to screen shot in the documentation link under: "Create & Exit to complete the DHCP Server configuration" ?   Kind Regards Pavel ... View more

Agustin my firewalls running into this issue were running "PAN-OS 10.6.1-h3". I followed the procedures in the KB and it resolved my issue.  ... View more

Hello @renzanjo11   thanks for post!   Personally, I would be looking into Firewall logs to see whether it can reveal what is causing the time out. Could you have a look into below log files in Firewall around time of time out:   less mp-log ms.log less mp-log devsrv.log   Kind Regards Pavel ... View more

Hi @PavelK    Thank you for that link.. I was doing some searching earlier and hadn't found that one.   Based on that, I do agree it is working as expected.  It seems a bit odd to me that the risk levels are included as categories since, on the URL Check website, they're clearly labeled as risk levels and separate from the category listed.  It almost seems like they should design that differently where the risk levels are assessed but in a different section so that they don't really conflict with the URL categories.   As a workaround, I've made several new URL categories... one that matches education and low-risk, another that matches computer-and-info and low-risk, etc.  So it is matching if both of those are present.   I'm sure the other way to do it would be to allow those categories and the low-risk as well.. my worry was if I came across a website that is only categorized as low-risk but nothing else in which case it would have been allowed.  That being said, I'm not sure I've come across any websites like that and I wonder if I ever would because, again, on the URL Check page it very much seems like every website should have both a risk level and then one or more URL categories.   Thanks! ... View more