Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Live
- ›
- About Ameya-Kawimandan
About Ameya-Kawimandan
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
a month ago
385Posts
249Likes
121Solutions
Dec 16, 2020Last Visited
User
Activity
User
Profile
Latest posts by Ameya-Kawimandan
| Subject | Views | Posted |
|---|---|---|
| 970 | 01-07-2014 05:50 PM | |
| 1613 | 01-07-2014 04:31 PM | |
| 1021 | 12-31-2013 03:19 PM | |
| 781 | 11-10-2013 12:41 AM | |
| 688 | 11-08-2013 01:16 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 | 06-12-2012 02:12 PM | |
| 1 | 06-05-2012 11:52 AM | |
| 1 | 05-31-2013 03:28 PM | |
| 1 | 04-24-2013 05:26 PM | |
| 1 | 08-26-2013 02:55 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 5 |
Retired Member
|
by
Retired Member
| |
| 4 |
Retired Member
| ||
| 1 | |||
| 1 | |||
| 1 |
User Badges
Public Statistics
| Date Registered | 02-22-2012 01:14 PM |
| Date Last Visited | a month ago |
| Total Messages Posted | 439 |
| Total Likes Received | 249 |
09-09-2013
05:56 AM
2 Kudos
Can you please report this mis-identification to Support: How to Validate and Report Application Misidentification
... View more
09-09-2013
05:44 AM
1 Kudo
For VLANs behind L2 switch you can set up PA firewall as a Router on a stick. Not sure how PA could play a role in securing inter-VLAN traffic for the VLANs terminated on the L3 Switch. Following References can be helpful. Securing Inter VLAN Traffic Layer 2 Networking
... View more
09-09-2013
05:19 AM
1 Kudo
Can you try to set Local ID on ASA =Public IP of the NAT device && Peer Identification on PA firewall = Public IP of the NAT device under ike-gateway on PA.
... View more
09-09-2013
05:08 AM
2 Kudos
Does authentication work w/o Allow list i.e with all groups. What's the format used for Authentication, It should be simply username and not domain\username. Check if you have configured Auth Profile correctly. I always miss Login attribute : sAMAccountName
... View more
09-07-2013
08:08 AM
1 Kudo
Pattern-Based Application Identification occurs in the App_ID Engine. If a matching signature is not found in the Application Database the Application is identified as either unknown-tcp, unknown-udp, or non-syn-tcp. For applications changing from one to another, Identification is done via protocol decoding in content inspection. For detailed Packet Flow :ReferPacket Flow in PAN-OS See Also :Unknown Applications
... View more
09-06-2013
05:04 PM
Assuming : HA Active-Active between PANA (Dev ID =0 ) and PANB (Dev ID =1) PANA-Device Priority -100 ===>Active-Primary ----Dev ID =0 PANB-Device Priority -200 ===>Active-Secondary----Dev ID =1 Rationale : Priroties assigned to the Device IDs for a certain Floating IP govern which Unit will own the Floating IP. Floating IPs are tied to the priorities of the Device ID and not the Device Priority (Device>High Availability >Election Settings). Lower priority takes precedence. Example: Configure floating IPs 192.168.50.254 and 192.168.50.253 on the interface eth-1/4 with Device ID =1 have lower priority than Device ID 0. This will ensure that a floating IPs 192.168.50.254 and 192.168.50.253 will always stay active on Device ID-1 or Active Secondary. IP 192.168.50.252 will always stay active on Dev-0 or Active Primary. HTH, Ameya
... View more
08-27-2013
11:15 AM
Have not tested all the scenarios but Rebooting the FW or Updating the PAN-OS should not stop the functionality to work as the Content DB would not change with reboot. .I guess Factory reset could be a corner case.
... View more
08-27-2013
12:35 AM
Threat prevention (AV/Apps & Threats) license expiration will only stop the new updates while these features will continue to function with existing Database.
... View more
08-26-2013
10:49 PM
Can you add the o/p for following commands to this discussion >show running nat-policy >show routing route Also start a continuous ping to the DMZ public IP and monitor the session table: >show session all filter source <ip> if you see any PING sessions displayed add the following o/p with this discussion >show session <id>
... View more
08-26-2013
05:49 PM
1 Kudo
Can you add a packet-filter and monitor the Global counters for the packet-filter for the source IP (Monitor>Packet Filter) Initiate a PING to the destination (Public DMZ) ,and verify if the packets are making it to the firewall using the following command: >show counter global filter packet-filter yes delta yes (Run multiple times )
... View more
08-26-2013
02:57 AM
1 Kudo
CAn you please follow the procedure described in the following KB article: Content Filter Update Error "No matching apps package"
... View more
08-26-2013
02:55 AM
1 Kudo
These are Dead Peer Detection check logs shown in ikemgr.log
... View more
08-26-2013
12:14 AM
1 Kudo
Application PCAPs are generally enabled for Unknown apps : unknown-tcp or unknown-udp You can use the following filter ( app eq unknown-tcp ) or ( app eq unknown-udp ) You can verify the capture settings using CLI command : > show running application setting
... View more
08-26-2013
12:03 AM
Please Allow the Original address 1.2.3.91 in the Security rule. Source : Outside Source Address : Any Destination : Inside Destination Address : 10.100.1.120 Change to : Source : Outside Source Address : Any Destination : Inside Destination Address : 1.2.3.91
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
a month ago
|
Latest Tags
No tags yet
Likes From
Latest Blogs
Latest Posts
Copyright 2007 - 2021 - Palo Alto Networks
