About Fariq_Zaidi

Hi Reaper,   In the ICMP , showing the latency during the event happen and consist with the logs tcp sync with data has been drop.  That why we concern if this the cause the latency happen.   i attach the show running resource monitor and session info (Doc log)  and Yes we have enable the packet buffer.   Thank you     ... View more

Hi support ,   after upgrade, the Sd wan policy not working for both firewall , the workaround is we have to restart the firewall to it working again   it this normal?    thank you   regards Fariq   ... View more

Hi Tom    Thank you for input.   1. how are both your AP connected in relation to the firewall? do they 'join' in the middle on a switch or are they plugged into their own respective port on the firewall? -- The AP is connected to the switch but not directly into firewall port. They connected to the switch that had another uplink until their packet arrived at firewall. Maybe we can call it ' join' in the midlle ? 2. does the user retain the same IP when hopping AP? -- yes, the user retain the same IP when hopping AP   3. i am collecting the packet diag but Should the x.x.x.x filled with my AP ip subnet ? for example 192.168.24.0 ? Thank you  Fariq   ... View more

Hi Myky, Did the issue re-occur?  Did you have open to TAC and what the solution? For now workaround is to manually sync from Panorama to firewall but we don’t want to do always. This will not be the best practice.   if have the solution can you share ?   Thank you   Regards Fariq   ... View more

Hi Pavel,   thank you for the information and it very helpful.😀   i have additional question if you can help me to answer it.   Recently, we have tried implementing the solution of using Panorama as a local collector in our lab environment. We have built our lab environment using virtual machine (Panorama VM, Log Collector VM, and Firewall VM) and  we are using Panos 10.1.8-h2.   We conducted several test scenarios: 1. All log collectors are UP. 2. LC1 is down, while the other is UP. 3. LC1 is back UP, and all devices are UP. 4. LC2 is down, while the other is UP. 5. LC2 is back UP, and all devices are UP.   With these scenarios, the obtained results are as follows: 1. When all log collectors are UP, the Firewall sends logs to LC1, and Panorama successfully queries and updates logs. 2. When LC1 is down, the Firewall sends logs to LC2. Panorama successfully queries logs, but the logs are not updating (stuck). 3. When LC1 is back UP, the Firewall resumes sending logs to LC1. Panorama successfully queries logs, and logs update normally. 4. When LC2 is down, the firewall continues to send logs to LC1. Panorama cannot query logs, resulting in a blank log monitor. 5. When LC2 is UP, the firewall still sends logs to LC1, and Panorama successfully queries logs and logs are updating.   Based on these results, I believe they do not align with what we expected, even though Panorama has been added as a local collector.   Is this behaviour is normal? Or is it that the solution cannot be applied in a virtual machine environment?    Thank you ... View more