About jburugupalli

Hello Infotech, Please refer the following link for detailed explanation about incomplete in the application field: Incomplete, Insufficient data and Not-applicable in the application field Regards, Jahnavi ... View more

Hi, User Identification Timeout on agent contacts the AD server for group membership information, 60 minutes default. Regards, Jahnavi ... View more

Hello Zewwy, Please refer the below link to upgrade the User-id agent to latest version How to Upgrade User-ID Agent? Thanks, Jahnavi ... View more

Hello Interface, If you are using windows server for SCP export the SCP export functionality to windows based severs is not supported. Currently we only support Linux based SCP server for export. Thanks, Jahnavi. ... View more

Hello apackard, Getting 'No Update Information Available' when looking for the latest software packages    -  When you go to tab software under tab panorama you get error "'No Update Information Available' can you please click on Check Now link at the bottom of the Software page. When it sometimes does work, when trying to download latest (6.0.1) image we get an authentication\integrity error on the package.       - this error might occur during software upgrades. This error does not mean there was a problem downloading the new image, but instead it indicates that there is something wrong with the current PAN-OS image. Can you please try to re-install the current PAN-OS software then attempt the upgrade again. Please refer the following link for more information about the PAN firewalls not forwarding logs to panorama Palo Alto Networks Firewall not Forwarding Logs to Panorama (VM and M-100) Regards, Jahnavi ... View more

Hello Lachen, You can refer the following document to push the firewall certificate using GPO. Pushing Firewall Certificate using GPO Regards, Jahnavi. ... View more

Hello jwolach, The devices listed in the managed devices are ordered by HA pair and serial numbers. The device with lower serial number will always first as HA master device and the second device in HA pair with high serial number will be listed " HA peer device". Note:Master and peer device designation has no correlation with which device is Active or Passive in an HA Pair. Regards, Jahnavi. ... View more

Hello Lachen, tech note indicates 500 series devices is not able to support policing but does perform traffic shaping. Policing is performed to avoid unintentional starvation of the QoS priority queues. All platforms support shaping, which is at the egress interface only. In PA-200/500 and PA-2000 Series devices, Shaping is performed in software only. However, in PA-4000/5000 Series devices, Shaping is performed in hardware. Qos rules matches exactly what is configured in that rule and apply Qos profile matching the rule exactly like security policies. If we you apply Qos policy for set of users,Qos profile and Qos class matching the rule will be applied only for that users. And if you want you also can enable Qos policy only at certain time range by using the schedule feature. Regards, Jahnavi. ... View more

Hello Lahcen, Configuring Qos on V-wire is nothing different than configuring it on other type of interfaces. Doc about Qos in PAN. https://live.paloaltonetworks.com/docs/DOC-3439 Qos rules matches exactly what is configured in that rule and apply Qos profile matching the rule exactly like security policies. If we you apply Qos policy for set of users,Qos profile and Qos class matching the rule will be applied only for that users. And if you want you also can enable Qos policy only at certain time range by using the schedule feature. Regards, Jahnavi. ... View more

Hello Kalus, We see the above error message if the "multi virtual system capability" under tab > device> setup > management > general settings  is not enabled on the passive device.  You need same set of licenses on both devices in HA pair ,because when the devices switches over then you will not be able to get the same functionality on both of them. Regards, Jahnavi ... View more

Hello Tiwara, Cache is cleared completely when the "dynamic url cache timeout"  timer expires ,you can change it to 24 hours instead of 168 hours ( 7 days ) default. This value is used to determine the length of time an URL entry can remain in the cache after it is from the URL filtering service. Dynamic URL cache timeout value is used when the setting "Dynamic URL Filtering"  is enabled on URL filtering profiles which will access the Bright-cloud database in the cloud for the latest categorization information. Otherwise, the URL filtering engine will only check for categorization on-device cache. More information on URL categorization can be found here: URL Categorization Components and Process Regards, Jahnavi. ... View more

Hello Amber, Only one log forwarding profile can be assigned to a security policy at any given point of time, but different security policies can have different log forwarding profile assigned. So to get email alerts for vulnerability, AV and Spyware for any severity , you can create email profile and attach email profile to log type " Threat"  as suggested by Steven Puluka Please let us know if you have any questions. Regards, Jahnavi. ... View more