About Gertjan-HFG

Gertjan-HFG · ‎08-24-2016

We upgraded a VM100 from PAN-OS 7.0.8 to PAN-OS 7.1.4 H2. We had 0 issues running 7.0.8 but we needed the DHE en EHCDE cipher support Now we have the issue that the Data filtering and Url filtering logging stops at serveral hours. Also some https sites starting to become very slow ands ssl decryption starting to fail for some websites. The vm100(4cpu) is under medium load and dataplane cpu usage average 30-40 % The only way to get it working again for x hours is to reboot the VM-100 I cannot reproduce these issues in our lab environment. Someone else experience the same bug/behaviour?

Gertjan-HFG · ‎07-11-2016

We are running some small sites with version 7.1.3 and no issues. I am considering to upgrade 1 primary site to 7.1.3 but only for 1 improvement: Better SSL decryption PFS cipher support (Primary sites on 7.0.8 now)

Gertjan-HFG · ‎04-13-2016

Apps and Threats Update 578 is pulled by Palo Alto. Waiting for their statement.

Gertjan-HFG · ‎04-05-2016

Upgraded my lab. Running the final for 2 days now. Finally the ECDHE ciphers for the SSL proxy are there, and they work! Only inbound ssl decyption with ECDHE ciphers don't work for me. For now i am satisfied.

Gertjan-HFG · ‎03-14-2016

We had the same. Also found nothing unusual in our PA. At the end is seems that our SEO guy had a toolbar in his webbrowser to "enhance" some websites pagerank.

Gertjan-HFG · ‎02-26-2016

VMware ESXi 6.0 is supported for PAN-OS-7.0.x https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/framemaker/70/virtualization/Virtualization.pdf From the document: The VM-Series firewall has the following requirements:  VMware ESXi with vSphere 5.1, 5.5, or 6.0 for VM-Series running PAN-OS 7.0. Note that the minimum supported version of the virtual hardware family type (also known as the VMware virtual hardware version) on the ESXi server is vmx-09.

Gertjan-HFG · ‎01-25-2016

There is no real fix or solution, the problem is these 40xx series have 1GB management plane memory. See the swap usages there are extreme compared the the real installed memory. . It is the same problem the PA500 faced, but for the PA500 is a memory upgrade kit available. And "new" PA500 come with 2 GB standard. The memory for the PA500 is standard "pc" memory. As mentioned before for the PA500 is a upgrade kit, for the 40xx series there is not. but i know some people that upgraded a 4020 lab FW to 2GB with normal "pc" memory. And it just works fine, but warrenty void en no support.

Gertjan-HFG · ‎01-19-2016

Interesting on a PA500 wich is onder my administration, The average management cpu usage dropped 10% Where: doing inboud/outbound SSL decryption/ Full threat protection/pandb url filtering/4 UIA The previous version was 6.1.8

Gertjan-HFG · ‎01-19-2016

There is no real fix, the problem is these 40xx series have 1GB management plane memory. It is the same problem the PA500 faced, but for the PA500 is a memory upgrade kit available. And "new" PA500 come with 2 GB standard. The memory for the PA500 is standard "pc" memory. As mentioned before for the PA500 is a upgrade kit, for the 40xx series there is not. but i know some people that upgraded a 4020 lab FW to 2GB with normal "pc" memory. And it just works fine, but warrenty void en no support.

Gertjan-HFG · ‎01-06-2016

The safest choice is 6.1.8 But the 7.0.4 version is the first version in the 7.0.x serie that is "production ready" At this moment whe have 3 production firewalls running 7.0.4 for 15 days now. 2 low traffic and 1 medium ~150 - 250 Mbit concurrent egress traffic Running pandb / full threat protection and SSL decryption in and outbound.

Gertjan-HFG · ‎12-31-2015

The safest choice is 6.1.8 But the 7.0.4 version is the first version in the 7.0.x serie that is "production ready"

Gertjan-HFG · ‎12-31-2015

Here also, no issues after a week. I agree bug squashed!

Gertjan-HFG · ‎12-24-2015

We have the same issue. Our PA found it in traffc between our WSUS server and Windows 7 client. Apparently our other PA did not detect if when the WSUS server downloaded it from the Internet or at that moment its was running antoher AV definition version.

Gertjan-HFG · ‎12-23-2015

Hi, Upgraded yesterday from 7.0.3 to 7.0.4 (3 firewalls), no issues so far. SSL freeze seemes to be fixed. And also the annoying bug that some Microsoft sites failed to load randomly. This is the first time that i am satisfied with the 7.0.x release. It looks finally "production ready"

Gertjan-HFG · ‎12-21-2015

Tried the workaround but it gives just very little improvement. Palo Alto please release the 7.0.4 asap. Where in the week of 21 december!

Member Since	‎06-21-2015 02:37 AM
Date Last Visited	‎10-21-2020 03:10 AM
Posts	75
Total Likes Received	15

Online Status	Offline
Date Last Visited	‎10-21-2020 03:10 AM

About Gertjan-HFG

Re: Best config to speed up HA failover

Re: 5000 Series not supported on PanOS 9

Re: PA-220 Configure E1/2-5 as basic Switch Ports?

Re: Software End-of-Life policy vs end of support

Re: Latency on Internal Interface

Re: Latency on Internal Interface

Re: Latency on Internal Interface

Re: Latency on Internal Interface

Re: QoS statistics Graphic monitoring Issue

Re: After upgrading a pair of PA-3050 to 8.0.4, very slow throughput, reduced network connection spe

Re: Software End-of-Life policy vs end of support

Re: Release date for PAN-OS 8.05

Re: Migration path from PA-2020 to PA-820

Re: The latest reliable panOS version

Re: The latest reliable panOS version

Recommended PAN-OS version

Re: PAN OS 8.1.5 - Thoughts?

Re: Software End-of-Life policy vs end of support

Re: Quick Note on 8.1.0 Deployments

Quick Note on 8.1.0 Deployments

PAN-OS 7.1.4-H2 Data filtering and Url filtering logging stops at serveral hours+ SSL decrypt fails

Re: Discussion on most stable PAN-OS image as of July 2016

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Upgrade to 7.1.0

Re: "Unusual traffic from your computer network"

Re: VMware ESXi 6.0 and PA VMs

Re: Management Server sluggish

Re: Higher Management CPU post upgrade to 7.0.4

Re: Panorama commit to PA4060 hangs at "commit" process 99%

Re: 7.0.4 upgrade

Re: Version 6.1.8, any issues?

Re: Post 7.0x upgrade intermittend SSL traffic hangs when being decrypted

Re: FalsePositive on Silverlight.exe (Virus/Win32.slugin.ozi ID: 2044771)

Re: Post 7.0x upgrade intermittend SSL traffic hangs when being decrypted

Re: Post 7.0x upgrade intermittend SSL traffic hangs when being decrypted

Unlock your full community experience!

About Gertjan-HFG