About Fariq_Zaidi

Greeting all,   I recently experience GP VPN disconnecting after installing Windows Update kb5037771 for win11 laptop where it totally cannot sign-in at all.   Kindly advise is this something can be done on firewall level or on client machine to fix this issue   Thank you ... View more

Hi , i receive alert through email that the WildFire auto update agent failed to download Wildfire version 865169-869036 on April 16 2024 at 15:01:48 GMT , 23:01:48 , 16:23:01:48    but when i go through the System logs, it doesn't show the  version 865169-869036 is failed to download or success to install. a newest  successfully wildfire package has been install    the alert still coming in as below   please let me know where to check and how to resolve this.   Thank you ... View more

Hi    we encounter issue show as below:   Syslog  SSL error while writing stream; tls_error=\'SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure\'. location=\'/opt/pancfg/mgmt/syslogng/pan_sysng.cfg:68:3\   found in syslog-ng.log as below:   syslog-ng.log 2024-02-14 07:30:33 Feb 14 07:30:33 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: Syslog connection established; fd='32', server='AF_INET(10.xx.xx.xx.xxx', local='AF_INET(0.0.0.0:0)' syslog-ng.log 2024-02-14 07:30:33 Feb 14 07:30:33 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: SSL error while writing stream; tls_error='SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure', location='/opt/pancfg/mgmt/syslogng/pan_sysng.cfg:68:3' syslog-ng.log 2024-02-14 07:30:33 Feb 14 07:30:33 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: I/O error occurred while writing; fd='32', error='Broken pipe (32)' syslog-ng.log 2024-02-14 07:30:33 Feb 14 07:30:33 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: Syslog connection broken; fd='32', server='AF_INET(10.xx.xx.xx.xxx)', time_reopen='10' syslog-ng.log 2024-02-14 07:30:38 Feb 14 07:30:38 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: Syslog connection failed; fd='32', server='AF_INET(10.xx.xx.xx.xxx)', error='Connection refused (111)', time_reopen='10' syslog-ng.log 2024-02-14 07:30:43 Feb 14 07:30:43 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: Syslog connection established; fd='32', server='AF_INET(10.xx.xx.xx.xxx)', local='AF_INET(0.0.0.0:0)' syslog-ng.log 2024-02-14 07:30:43 Feb 14 07:30:43 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: SSL error while writing stream; tls_error='SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure', location='/opt/pancfg/mgmt/syslogng/pan_sysng.cfg:68:3' syslog-ng.log 2024-02-14 07:30:43 Feb 14 07:30:43 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: I/O error occurred while writing; fd='32', error='Broken pipe (32)' syslog-ng.log 2024-02-14 07:30:43 Feb 14 07:30:43 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: Syslog connection broken; fd='32', server='AF_INET(10.xx.xx.xx.xxx)', time_reopen='10' syslog-ng.log 2024-02-14 07:30:48 Feb 14 07:30:48 DC1-L4-R25-EXT-PA01 syslog-ng[12083]: Syslog connection failed; fd='32', server='AF_INET(10.xx.xx.xx.xxx)', error='Connection refused (111)', time_reopen='10'   please advise if there is issue with panorama.   Thank you ... View more

Hi    can anyone assist me with the document how to check what went wrong with the report as we generate report last month but only appears recent logs   FYI, we have done generate report monthly previously without issue .   we need to know where we want to check . PAN-OS 9.1.16-h3   Thank you ... View more

Hi,   We are currently facing a issue with our WildFire Appliance, and we seek your assistance in resolving it. The config status at the WildFire Appliance is out of sync, with detail this " '/config/device/entry[localhost.localdomain]/deviceconfig/system/update-server' on remote, but not on panorama ".    i am not sure how to get this fix. kindly please help   thank you       ... View more

Hi    We are encountering issues with the "commit-all" API. The changes and configurations are in "commit list" then we tried to hit API commit-all, There is nothing happen in "commit list". The logs indicate a successful operation but in the error tags.    We expect "commit-all" API can push all configurations in commit list to firewall because in Ver. 9.2 it was capable of pushing configurations to firewall. Is there an error in the configuration of the API we are using? Or could you provide us with recommendations for a suitable "commit-all" API configuration? Or we might have misunderstanding regarding the "commit-all" API?   We have already tried using the commit-all API documentation, but we are still facing difficulties.  below the API configuration details:   API:  curl -k -X GET 'https://xxxxxxx/api/?type=commit&action=all&cmd=<commit-all><shared-policy><device-group><entry name="xxxxxxxxx"><devices> <entry name="xxxxxxxxx"><vsys><member>vsys15</member></vsys></entry> <entry name="xxxxxxxxx"><vsys><member>vsys15</member></vsys></entry> </devices></entry></device-group><include-template>no</include-template></shared-policy></commit-all>&key=LUFRPT1JajZjeFc3a1Q2RnJØNØJRZzdØKzVEV2EzcnM9ZkViUORrYUNyUFBIdzNCdj1ETXdCaXFLNFJwdkI151pyUVAzakF2cQ=="   CMD: <commit-all>       <shared-policy>             <device-group>                   <entry name="xxxxxxxxx">                         <devices>                               <entry name="xxxxxxx">                                     <vsys>                                           <member>vsys15</member>                                     </vsys>                               </entry>                               <entry name="xxxxxxxx">                                     <vsys>                                           <member>vsys15</member>                                     </vsys>                               </entry>                         </devices>                   </entry>             </device-group>             <include-template>                   no             </include-template>       </shared-policy> </commit-all> ... View more

Hi Support,   We want to get top all users for last 30 days  using XML API, how we get it?   This is XML API to get top 10 users (Worked😞 <type><panorama-trsum><sortby>sessions</sortby><group-by>srcuser</group-by><aggregate-by><member>src</member><member>app</member></aggregate-by><values><member>sessions</member><member>bytes</member><member>nthreats</member></values></panorama-trsum></type><period>last-30-days/period><<topn>10</topn><topm><count>30</count></topm><caption>top-10-users-last-30-days</caption><description>Traffic Reports</description><device-group>{0}</device-group><query>(device-group eq '" . $deviceGroup . "') AND ( (srcuser neq '') )</query><runnow>yes</runnow>   This is the XML API for all users that I get from ChatGPT but it didn't work:   <type><panorama-trsum><sortby>sessions</sortby><group-by>srcuser</group-by><aggregate-by><member>src</member><member>app</member></aggregate-by><values><member>sessions</member><member>bytes</member><member>nthreats</member></values></panorama-trsum></type><period>last-30-days</period><caption>all-users-last-30-days</caption><description>TrafficReportsforAllUsers</description><device-group>{0}</device-group><query>(device-group eq '" . $deviceGroup . "') AND ( (srcuser neq '') )</query><runnow>yes</runnow>   And this is the XML API I get from XML API documentation:  /api/?type=report&async=yes&reporttype=predefined&reportname=top-users this API only for 1 day.   I tried to modified the XML above, add start and end date for 1 month but it still only get for 1 day.   How to modified the XML API to get for last 30 days using API above?   Please advise    thank you ... View more

Hi Support,   Good day, i have concern about this system alert DNS Security cloud query timeout. Not sure what to check as  if this is normal alert? The dns security cloud connection seems good.   attach the screenshot alert message and dns security connection   Kindly please advise   Thank you   ... View more