About tac.in

We are facing an issue as while integrating agentless user id integration.   AD is pingable from management as well trust interface but in the Server monitoring TAB the status is showing  ... View more

Hello All, We would like to know whether the Fortigate Cloud Firewall running on FortiOS Version 5 is supported by PA for IPsec VPN as we are getting below error and tunnel is not coming up. 2015-03-17 10:53:28 [DEBUG]: vendorid.c:274:check_vendorid(): received unknown Vendor ID à Other End device is a Fortigate Cloud Firewall running on FortiOS Version 5. Is this supported by Palo Alto ? 2015-03-17 10:53:28 [DEBUG]: ipsec_doi.c:283:get_ph1approval(): an acceptable proposal found. 2015-03-17 10:53:28 [DEBUG]: ikev1.c:1672:isakmp_ph1resend(): resend phase1 packet 24871bfed0152c7e:faab2d4faea77d3f 2015-03-17 10:53:34 [INFO]: ikev1.c:318:ikev1_main(): the packet is retransmitted by 40.132.56.196[500] 2015-03-17 10:53:46 [DEBUG]: ikev1.c:1672:isakmp_ph1resend(): resend phase1 packet 24871bfed0152c7e:faab2d4faea77d3f 2015-03-17 10:53:49 [PROTO_NOTIFY]: ikev1.c:2423:log_ph1negofailed(): ====> PHASE-1 NEGOTIATION FAILED AS RESPONDER, MAIN MODE <==== ====> Failed SA: 117.239.143.210[500]-40.132.56.196[500] cookie:0f9f6a98fdcb36ec:807e1f8d23119dee <==== Due to timeout. 2015-03-17 10:53:49 [INFO]: ikev1.c:2471:log_ph1deleted(): ====> PHASE-1 SA DELETED <==== ====> Deleted SA: 117.239.143.210[500]-40.132.56.196[500] cookie:0f9f6a98fdcb36ec:807e1f8d23119dee <==== Thanks. ... View more

Hello All, I have the below queries. 1) How configure 'TRACK' in Static Route (want to monitor the Gateway, As soon as current Gateway is fail immediately traffic will move to another Gateway) 2) How to configure multiple Peer Gateway in a single IPSEC Site to Site VPN( Diagram attached here with)  3)How to add multiple Remote subnet in Proxy IDs in IPSEC Tunnel Configuration. Thanks ... View more

Hello All, Need your help in understanding Global Protect license. Customer has PA-500 and it supports only 100 SSL VPN connections. Is it possible to upgrade the number of SSL VPNs to above 100,200 upto 500 by procuring GP license. Thanks. ... View more

Hi All, Please suggest me on how to advertise networks in BGP. Thanks, ... View more

The device model is 3020. From the output of >show system resources, we have found that the memory usage is 3781100k Is it alarming high memory usage? ... View more

  Model# of the device: PA-5020 Serial# of the device: 0011C103358 Current PANOS version: 5.0.4 Customer requires information that whether CVE-2015-0310 will have an impact on the PANOS version or not and if yes then is there any patch available? An exploit for CVE-2015-0310 exists in the wild, which is being used in attacks against older versions of Flash Player.     ... View more

While trying to push dynamic updates from Panorama to managed devices it is failing for some of the devices(PA-200) It gives an error " Failed to load image.." We have checked the licenses of the devices for which dynamic updates are failing and found that it is valid. Also the PANOS version of Panorama is 6.0.4 and the managed devices PANOS versions are below 6.0.4. What could be the probable cause for such an error as I was not able to find the same in any KB article.. ... View more