About Kandarp_Desai

Kandarp_Desai · ‎09-02-2024

Thanks a ton Tom for your answers as always !!

Kandarp_Desai · ‎08-30-2024

Hello, Would like to know which specific log events from the system logs for IPsec we should be monitoring to know that the IPsec tunnel has gone down and got back up. We don't have tunnel monitoring or path monitoring configured so this is the only way we can monitor the tunnel going up or down. Which logs in the SYSTEM logs can we monitor which indicates that a tunnel has gone down. And also which event indicates that TUNNEL is back up (For both IKEv1 and IKEv2) ?

Kandarp_Desai · ‎09-25-2023

Thank you Pavel for your help.

Kandarp_Desai · ‎09-01-2023

Is Prisma Access and Prisma SDWAN compatible with TUFIN ? Is there any documentation for the same.

Kandarp_Desai · ‎08-28-2023

Thanks !!

Kandarp_Desai · ‎08-22-2023

How important is it to configure an alerting/incident for failed login attempts to the Palo Alto Panorama or Firewalls. This is for: (1). SAML based authentication (2). Local logins. Should both of them be tracked and do we need to monitor the system logs for any particular "event" for both of them ?

Kandarp_Desai · ‎08-02-2023

We only have IPsec tunnels on the firewall.

Kandarp_Desai · ‎07-25-2023

Can I change the Log Collector Disk quota of detailed logs from 60 to 70% and decrease the quota of summary logs from 30% to 20%, what could be the impact, I can see from the CLI output that summary log quotas are high and the used space is quite less.

Kandarp_Desai · ‎07-11-2023

Hello All, What are the steps to be taken in the event that Panorama detected some threat events in the category of DDoS. What should be the next steps to be taken from our end as someone managing the Panorama? This is from the viewpoint of Incident Response.

Kandarp_Desai · ‎05-10-2023

How to take the backup of all the logs which are currently stored in the Log Collector disk (Approx. 300GB of data over 1 year). I have tried the export of logs from the Monitor TAB in CSV format but it's a really massive task to individually download so many logs in excel.

Kandarp_Desai · ‎04-05-2023

Thanks for the reply Tom. My findings are the same that its not possible to reduce the 2TB disk size.

Kandarp_Desai · ‎04-04-2023

Hello, Is it possible to do this ?

Kandarp_Desai · ‎03-30-2023

Can someone help 🙂

Kandarp_Desai · ‎03-29-2023

Hello, We have configured Palo Alto Panorama ( VM series ) as a log collector and have 2TB disk attached which seems to be the minimum required storage. Now we are observing that it's very underutilized and hardly 200GB is being used. We want to save Azure Storage costs, so is there a solution to this, can we reduce the log collector size from the minimum 2TB to something like 500GB ? Or is there any other solutions to save some costs regarding this.

Kandarp_Desai · ‎03-08-2023

Thanks for your help Tom !!

Member Since	‎01-11-2022 07:17 AM
Date Last Visited	‎07-24-2025 04:56 AM
Posts	40
Total Likes Received	7

Online Status	Offline
Date Last Visited	‎07-24-2025 04:56 AM

About Kandarp_Desai

Re: We want to know which events should we be monitoring in SYSTEM events logs to know that the IPsec tunnel is down and back up again.

We want to know which events should we be monitoring in SYSTEM events logs to know that the IPsec tunnel is down and back up again.

Re: Is Prisma Access and Prisma SDWAN compatible with TUFIN ?

Is Prisma Access and Prisma SDWAN compatible with TUFIN ?

Re: Should you track failed login attempts and how ?

Should you track failed login attempts and how ?

Do we require DDoS protection ( Zone Protection ) if we have only two TCP services open to the internet.

Can i change the disk quota for Panorama Log Collector

What are the response steps to be taken in the event that DDoS is detected on the Palo Alto ?

Query regarding the Log Collector Disk Backup

Re: We want to know which events should we be monitoring in SYSTEM events logs to know that the IPsec tunnel is down and back up again.

Re: Request help with the exact meaning of these IPsec event alerts for Palo Alto.

Palo Alto in Virtual wire vs TAP mode.

Re: Palo Alto in Virtual wire vs TAP mode.

Re: Detection of Critical Vulnerabilities, what does it mean ?

Cobalt Strike Attack Detection & Defense Technology Overview

Re: We want to know which events should we be monitoring in SYSTEM events logs to know that the IPsec tunnel is down and back up again.

Re: How to restore our Azure firewall setup if upgrade activity fails

Re: Should you track failed login attempts and how ?

Re: Do we require DDoS protection ( Zone Protection ) if we have only two TCP services open to the internet.

Re: We want to know which events should we be monitoring in SYSTEM events logs to know that the IPsec tunnel is down and back up again.

We want to know which events should we be monitoring in SYSTEM events logs to know that the IPsec tunnel is down and back up again.

Re: Is Prisma Access and Prisma SDWAN compatible with TUFIN ?

Is Prisma Access and Prisma SDWAN compatible with TUFIN ?

Re: Should you track failed login attempts and how ?

Should you track failed login attempts and how ?

Do we require DDoS protection ( Zone Protection ) if we have only two TCP services open to the internet.

Can i change the disk quota for Panorama Log Collector

What are the response steps to be taken in the event that DDoS is detected on the Palo Alto ?

Query regarding the Log Collector Disk Backup

Re: Reducing the size of log collector disk from the minimum of 2TB.

Re: Reducing the size of log collector disk from the minimum of 2TB.

Re: Reducing the size of log collector disk from the minimum of 2TB.

Reducing the size of log collector disk from the minimum of 2TB.

Re: Request help with the exact meaning of these IPsec event alerts for Palo Alto.

Unlock your full community experience!

About Kandarp_Desai