About Carracido

  Hello community!   We are monitoring the Panorama system resources and we get alerts regarding memory (MIB). We don´t have any performance issues though. Can you advice if the following memory levels are fine or it´s too little memory free?   > show system resources top - 15:54:07 up 144 days, 33 min, 1 user, load average: 0.68, 0.76, 0.87 Tasks: 352 total, 1 running, 349 sleeping, 0 stopped, 2 zombie %Cpu(s): 0.4 us, 0.8 sy, 0.0 ni, 98.5 id, 0.0 wa, 0.0 hi, 0.4 si, 0.0 st MiB Mem : 64402.4 total, 438.4 free, 60271.7 used, 3692.3 buff/cache MiB Swap: 2047.9 total, 0.0 free, 2047.9 used. 3624.3 avail Mem    Thank you! ... View more

Hello!   Do you know whether Vmware vcenter plugin (Panorama) version 2.0.0 support VMware 8.0.U3? There´s not documentation confirming this. I would assume it does as the plugin 2.0.0 requires minimum Pan-OS 10.2.8 and this release supports esxi 8.0 https://docs.paloaltonetworks.com/compatibility-matrix/panorama/panorama-hypervisor-support   Anyone can confirm this please?   Thanks! ... View more

Dear community!   I have a customer who is using Intune to manage IOS devices and via Intune can pre-deploy Globalprotect settings on the Iphones such as "use_default_browser_for_saml" to be able to use SSO. https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-the-default-browser-for-saml-authenitcation   My questions is if for Android devices you also can use Intune to predeploy te same GP settings as for IOS devices?   According to the official documentation only Mobiliron and workspace ONE are available for Android devices, however doing some online research it seems that it´s possible to redeploy GP settings by using Intune. Has anyone achieved this?   Thank you in advance for your answers?   ... View more

Dear community!   Did you notice that there´s an discrepancy regarding web-browsing ports between applipedia and Pan-OS application?   If you check for web-browsing details in the firewall you see standard port 80 and secure port 443.    In the applipedia you can see only standard port 80 associated to the web-browsing application:   This can be misleading if you trust the applipedia, because actually when you create a rule with web-browing and service = application-default the traffic will match this rule on ports 80 and 443.   Have you ever checked with Palo Alto about this fact?     ... View more

Dear Community!   While checking the Wildfire uploads, I see that many uploads of ms-office files are cancelled with the following log : ms-office      cancelled - by DP, smb out of order detected   Does anyone know what´s the reason of this upload being cancelled?   Thanks! ... View more

Hello Community!   We have 2 external interfaces, eth_1 holding the default 0.0.0.0/0 route and eth_2 We would like to use external interface n2 to build IPSec tunnels whose peers have dynamic public IP.   Is there a way to route the traffic to these dynamic peers over eth_2 without having to use default route over eth_1?   Thank you!   ... View more

Hello community.   I have configured Azure SAML authentication for globalprotect users and I would like to get domain\username after authentication to match with GP portal´s agent configurations also in the form of domain\username or domain\group.   Is there a way I can configure the firewall to get the domain\username after authentication or this is something that has to be checked at Azure side?   Thank you! ... View more

Dear community,   I have observed that processes "log_index" and "stats_gen" appear in "suspended" state sometimes. We didn´t notice any issue though. Do you know if that´s a normal behavior?   Kind Regards! ... View more

Dear Community,   I have added to Panorama VM (mode VMware ESXi) 3 extra disk units: 2TB, 2TB and 12TB.    The Panorama is acknowledging all the disk units and partitioned the 12TB unit in 6 x 2TB units, until here all good. But 4 of the partitions /dev/sdd1-3 and sdd-5 shows only 1% used. Do you have any idea why this is happening? It appears to be available unused space and we only have 9 days of detailed log history with a an expiration-period set to 0 days.   admin@Panorama> show system disk details Name : sdd State : Present Size : 12582912 MB Status : Available Reason : Admin enabled Name : sdb State : Present Size : 2097152 MB Status : Available Reason : Admin enabled Name : sdc State : Present Size : 2097152 MB Status : Available Reason : Admin enabled admin@Panorama> show system disk-space Filesystem Size Used Avail Use% Mounted on /dev/root 7.9G 5.0G 2.5G 68% / none 32G 136K 32G 1% /dev /dev/sda5 24G 20G 3.5G 85% /opt/pancfg /dev/sda6 5.9G 2.4G 3.3G 42% /opt/panrepo tmpfs 32G 476M 31G 2% /dev/shm cgroup_root 32G 0 32G 0% /cgroup /dev/sda8 32G 15G 16G 50% /opt/panlogs /dev/loop0 9.8G 23M 9.2G 1% /opt/logbuffer /dev/sdb1 1.7T 1.4T 236G 86% /opt/panlogs/ld1 /dev/sdd6 1.7T 1.4T 268G 84% /opt/panlogs/ld3 /dev/sdc1 1.7T 1.4T 238G 86% /opt/panlogs/ld2 /dev/sdd5 1.7T 77M 1.7T 1% /opt/panlogs/ld5 /dev/sdd4 1.7T 1.4T 269G 84% /opt/panlogs/ld4 /dev/sdd3 1.7T 77M 1.7T 1% /opt/panlogs/ld7 /dev/sdd2 1.7T 77M 1.7T 1% /opt/panlogs/ld6 /dev/sdd1 1.7T 77M 1.7T 1% /opt/panlogs/ld8 tmpfs 12M 36K 12M 1% /opt/pancfg/mgmt/ssl/private tmpfs 32M 0 32M 0% /mnt/pantmp   admin@Panorama> show system logdb-quota Quotas: system: 25.00%, 3.351 GB Expiration-period: 0 days config: 30.00%, 4.021 GB Expiration-period: 0 days hip-reports: 1.00%, 0.134 GB Expiration-period: 0 days appstat: 35.00%, 4.692 GB Expiration-period: 0 days Disk usage: system: Logs and Indexes: 3.4GB Current Retention: 57 days config: Logs and Indexes: 3.3GB Current Retention: 1341 days appstatdb: Logs and Indexes: 4.7GB Current Retention: 233 days hip-reports: Logs and Indexes: 0 Current Retention: 0 days Slot:0 Quotas: detailed: 60.00%, 282 GB Expiration-period: 0 days summary: 30.00%, 141 GB Expiration-period: 0 days infra_audit: 5.00%, 24 GB Expiration-period: 0 days platform: 0.10%, 0 GB Expiration-period: 0 days external: 0.10%, 0 GB Expiration-period: 0 days Disk usage: detailed: Logs: 273764 MB, Current Retention: 8 days summary: Logs: 136926 MB, Current Retention: 45 days infra_audit: Logs: 22816 MB, Current Retention: 138 days platform: Logs: 0 MB, Current Retention: 0 days external: Logs: 0 MB, Current Retention: 0 days Slot:1 Quotas: detailed: 60.00%, 282 GB Expiration-period: 0 days summary: 30.00%, 141 GB Expiration-period: 0 days infra_audit: 5.00%, 24 GB Expiration-period: 0 days platform: 0.10%, 0 GB Expiration-period: 0 days external: 0.10%, 0 GB Expiration-period: 0 days Disk usage: detailed: Logs: 273759 MB, Current Retention: 8 days summary: Logs: 136914 MB, Current Retention: 45 days infra_audit: Logs: 19673 MB, Current Retention: 138 days platform: Logs: 0 MB, Current Retention: 0 days external: Logs: 0 MB, Current Retention: 0 days Slot:2 Quotas: detailed: 60.00%, 282 GB Expiration-period: 0 days summary: 30.00%, 141 GB Expiration-period: 0 days infra_audit: 5.00%, 24 GB Expiration-period: 0 days platform: 0.10%, 0 GB Expiration-period: 0 days external: 0.10%, 0 GB Expiration-period: 0 days Disk usage: detailed: Logs: 273756 MB, Current Retention: 8 days summary: Logs: 136916 MB, Current Retention: 45 days infra_audit: Logs: 15684 MB, Current Retention: 138 days platform: Logs: 0 MB, Current Retention: 0 days external: Logs: 0 MB, Current Retention: 0 days Slot:3 Quotas: detailed: 60.00%, 282 GB Expiration-period: 0 days summary: 30.00%, 141 GB Expiration-period: 0 days infra_audit: 5.00%, 24 GB Expiration-period: 0 days platform: 0.10%, 0 GB Expiration-period: 0 days external: 0.10%, 0 GB Expiration-period: 0 days Disk usage: detailed: Logs: 273769 MB, Current Retention: 8 days summary: Logs: 136914 MB, Current Retention: 45 days infra_audit: Logs: 15598 MB, Current Retention: 138 days platform: Logs: 0 MB, Current Retention: 0 days external: Logs: 0 MB, Current Retention: 0 days   Thank you in advance for your answers!   ... View more

Hello community!   When enabling sd-wan in physical interface the upstream NAT box will appear, but when enable sd-wan for a L3 aggregate subinterface, the Upstream NAT option will not appear. Does anyone know if upstream NAT is supported for such subinterfaces?   Cheers!  ... View more

Hello Community!   I´m trying to find a solution for the following problem:   I have two different forests created in the same Active Directory: Forest_1: subdomain_1.domain_1.com   Forest_2: subdomain_2.domain_2.com   There is a trust between the two forests   I have also the universal group_X in subdomain_1: subdomain_1\group_X   I added the User_Bob belonging to subdomain_2.domain_2.com into group_X   Is there any way to make the firewall map the User_Bob into group_X?   I tried several configurations but is not retrieving the mapping.   cheers. ... View more