About Sanjay_Ramaiah

Hi All, I am configuring the VM Firewall. I will not be able to manage the Firewall with the Mgmt Interface as customer has restricted only internet access and MPLS access. So decided to manage it via MPLS interface. There are 3 network adapters in ESXi host as per KB. 1 - Mgmt 2 - eth1/1 3 - eth1/2   Initially i configured eth1/1 with the /29 subnet and assigned the default VR. Created a Zone and assigned it as well.  I can see the eth1/1 interface is up but unable to see any arp entries learning. Created a default route 0.0.0.0 pointing to the next hop address in the same /29 subnet. Example: 10.10.10.1/29 - FW 10.10.10.2/29 - Nexthop   I am unable to ping the nexthop. not able to see the arp. Tried pinging from the source as 10.10.10.1 host 10.10.10.2 still getting the error Network not reachable.    Am i missing something here? Please suggest.   Regards, Sanjay S ... View more

Hi Team, HTTP/1.1 404 object not found We are seeing this error when the traffic is passing through the Palo. When we bypass palo it works absolutely fine. May i know what could be causing this? Regards, Sanjay S ... View more

Hi Team, We need to migrate a cluster Checkpoint firewall to PaloAlto. We do not have any Zones configured in Checkpoint, but Palo should have Zones as it is zone based firewalls. May i know what is the best way to migrate? Any KB or guide that can give detailed info on migration from Checkpoint to Palo? Regards, Sanjay S ... View more

Hi All, I have issues configuring eth1/2 in the VM firewall. I have configured eth1/1 as internet facing interface. eth1/2 should be the MPLS facing interface. When checked on Vcenter the NIC is showing teh Mgmt interface IP and not the eth1/2. Tried manually setting up the eth1/2 MAC in the Network adapter on Vcenter and tried but still teh same issue. Is there anything additional i have to do to get this working. Quite urgent delivery but unable to make any progress 😞   Regards, Sanjay S ... View more

Hi All, I need to add a route pointing to a Tunnel interface. As the peer has dynamic IP have created the IPsec tunnel with Dynamic IP Peer Identification as its Hostname.   To Add route in the VR as we do not have IP address if i just point it to the tunnel interface and select IP address as none would be enough?   Or is there any other way to configure it? Regards, Sanjay S   ... View more