About sraghunandan

This script does the indexing of  log databases, please open a case with support so that we can look into it to see why it causing the cpu to hike. ... View more

Can you look at o/p for the following command :- > show system resources follow (press C it will o/p the entire path which is causing the cpu to go high) press 1 (will show the cpu details) press (shift + H) thread info ... View more

For a workaround you can do the following:- login to the cli:- enable logging on putty. > set cli pager off > show log traffic start-time equal 2012/09/01@10:00:00 end-time equal  2012/09/03@10:00:00 this command would dump all the logs for that period. ... View more

There is a bug open in 4.1 branch wrt to this even though the max lines are set to 1048576 sometimes only 60-65k lines would show up  else browser would return  Page cannot be displayed refer to the bug: 28222 fixed in 5.0.0 ... View more

Have you had a chance to look at this doc https://live.paloaltonetworks.com/docs/DOC-3664 ... View more

Have you had a chance to review this doc:- https://live.paloaltonetworks.com/docs/DOC-3601 ... View more

There is a feature request submitted for this (FR ID:1829) , please have your local SE vote for this feature request. ... View more

Going by your description looks like the settings are correct 1. set the cluster id under advanced tab secondly under peer group set the peer as type client. So the PA is receiving the routes from its IBGP peers but not forwarding it out right. Anything unusual in less mp-log routed.log (press space to scroll down). Also if you click on More Runtime Stats--bgp--local rib---rib out under virtual routers . ... View more

Please navigate to Monitor tab and click on traffic. Now enter the following filter ( addr.src in userip ) Also if you could login into the cli using ssh, run the following command >show session all filter source (ip in question) and then look at the session i.e >show session id (id) for example:- admin@92-PA-3050> show session all -------------------------------------------------------------------------------- ID      Application    State   Type Flag  Src[Sport]/Zone/Proto (translated IP[P ort]) Vsys                                      Dst[Dport]/Zone (translated IP[Port]) -------------------------------------------------------------------------------- 56478   telnet         ACTIVE  FLOW       192.168.192.217[35534]/trust-L3/6  (19 2.168.192.217[35534]) >show session id 56748 Session           56478         c2s flow:                 source:      192.168.192.217 [trust-L3]                 dst:         10.2.2.1                 proto:       6                 sport:       35534           dport:      23                 state:       ACTIVE          type:       FLOW                 src user:    unknown                 dst user:    unknown         s2c flow:                 source:      10.2.2.1 [test]                 dst:         192.168.192.217                 proto:       6                 sport:       23              dport:      35534                 state:       ACTIVE          type:       FLOW                 src user:    unknown                 dst user:    unknown         start time                    : Wed Jun  5 19:09:21 2013         timeout                       : 432000 sec         time to live                  : 344073 sec         total byte count(c2s)         : 3028         total byte count(s2c)         : 0         layer7 packet count(c2s)      : 50         layer7 packet count(s2c)      : 0         vsys                          : vsys1         application                   : telnet         rule                          : rule1         session to be logged at end   : True         session in session ager       : True         session synced from HA peer   : False         layer7 processing             : enabled         URL filtering enabled         : False         session via syn-cookies       : False         session terminated on host    : False         session traverses tunnel      : False         captive portal session        : False         ingress interface             : ethernet1/4         egress interface              : ethernet1/7         session QoS rule              : N/A (class 4) ... View more

And also https://live.paloaltonetworks.com/docs/DOC-4139 ... View more

Please refer this document I think this is what you are looking for https://live.paloaltonetworks.com/docs/DOC-4078 ... View more