About Pras

Hi @vzamy, Had already done the restart of the ntp process with no luck. The troubleshooted some more and would like to show come snaps as below: NTP server is a Linux base and OS version is Redhat Enterprise Linux 7.9 It is pinging the server but apart from pinging nothing is being captured. Also, Server side has no issue apparently: it is getting the ntp packets from the FW   What could be the issue here? Thanks in advance.   ... View more

Hi @vzamy, Thanks for your reply. Please find my replies as below: This deployment was working well before. But when customer tried to implement  authentication, it stopped. Even now, this works well if the authentication is removed. (no upgrades were performed) - Per your output, it shows that the NTP is not reachable, did you rule that out?  it is reachable- it's only not reachable when authentication is enabled - What type of authentication are you using? md5/sha1? Tried on both md5/sha- both not working - Did you try using "show counter global filter delta yes packet-filter yes" combined with a pcap filter. (mandatory) Not yet- since it works well with no authentication - Do you have a pcap? what do you see there? Not Yet (even if I take what should I be looking at in it?) Thanks again. ... View more

Does this mean that if some one has a PAN DB and Advance PAN DB together (because they bought Adv PAN DB before the PAN DB expired), Advance PAN DB will take over ( like there is no meaning of the existing PAN DB)?   ... View more

@KieraMitchell Thanks a lot for following up. Yeah, the case was transferred to PA TAC (But i do not know the the resolution as I was on leave) ... View more

I have the same issue, no Antivirus section in the GUI, whereas this is a totally new box (no licenses installed previously) and spoke with TAC to reissue the authcodes.(whidch was done no the issue still persists) No solution yet. ... View more

@BPry There are no specific/interesting log errors but when I compared the config files. I noticed the configs are not exact and some configs are within different folders within the .xml file . It's strange. I m wondering how can I safely copy the config from primary to secondary. I saw another KB saying need to edit manually: management address and HA IPs and peer IPs, and hostname. Are these the only parameters that need to be edited? Thanks ... View more

Issue resolved, there were actually config difference in the pri and sec Fws'. Compared the configs one by one to make the changes. Thanks for your suggestion and help @OtakarKlier  ... View more

@BPry  I m having similar issue and I am interested to know how to safely make the configurations same on both the HA pairs? Thanks ... View more

Hi Otakar, Do not remember anything particular. Where should I start troubleshooting next?? Any Daemon??logs? Below is something is see in the peer FW's sys log. Lets say two firewalls have different running configs somehow, how to get them safely to sync? Thanks.     Thank you Thanks ... View more

Checked the Custom log format one by one, and found no issues.  Is there a way in FW to check if the Data Filtering Logs are being dropped or not forwarded? The configuration has no issues for sure bc other logs are reaching except for Data Filtering. ... View more

Thanks a lot, @aleksandar.astardzhiev : will follow this too and update  ... View more

@BPry :  ... View more

Thanks, @MP18  @KieraMitchell Nice explanation, I now understand it better. This means to see the usage of users under the app scope for more days, we need to make sure the daily traffic summary storage is more, yeah? ... View more