About bgirdner

Is this all of your code, what kind of error are you getting?   Not sure you lost your indentation when pasting the code but if not you may want to make sure it's properly indented as white space is significant in python.  Towards the end of the send_command function it looks like you are defining a variable named 'type' but after the = sign I don't see a quotation mark.     ... View more

Couldn't resist throwing in my 2 cents as well..   I use Panorama to collect everything and love being able to run reports against all firewalls in one place(especially since Panorama is on 7 and the firewalls and 6 so we get those extra features that way).   I also use Splunk but it doesn't collect all the logs just things I am more likely to want to see.  Then you have the extra ability to do things with the logs like create your own custom Dynamic Block List for the PANs to import on a schedule or more specific GlobalProtect reports that pull additional information in based on what the PAN logs have. ... View more

SSL decryption and quic disabled for chrome browsers enabled our free version of wildfire to work as well, one note was that I couldn't see WildFire entries in the WildFire logs on PAN-OS 5 but I could see it in the web portal(https://wildfire.paloaltonetworks.com/wildfire/reportlist)..after I upgraded to PAN-OS 6 I was able to see the wildfire entries in the firewall log as well. ... View more

*Edit* I forgot to mention that all the Egress Max/Guaranteed were kept at 0 *End Edit* I was experiencing a very similar issue where file uploads(antivirus updates/backups, etc) could temporarily consume the whole pipe and cause issues for voice/video/citrix.  Just prioritizing rtcp/rtp/sip as 1st priority, citrix as 2nd and everything else as third was enough to solve our issues.  Now we can have the pipe completely utilized and not have any issue with voice/citrix. ... View more

Thanks tshiv, That's pretty much what I was looking for.  Between the dead peer detection for tunnel monitoring and the logs already created when ospf routes go down I should, in theory, have PaloAlto logs for pretty much any isp type issue. -Ben ... View more

I haven't tried this quite yet but Dead Peer Detection is looking promising.(Dead Peer Detection and Tunnel Monitoring)  It sounds like I can have it monitor an ip address on the other end of the tunnel and then it will write an event to the system log on down events. @Mystique - Thanks for the syslog reminder and cautionary note, I have traffic and threat logs being forwarded already but the system syslog settings slipped by me. ... View more

You could use notepad++ to search and replace your list to match the Panorama syntax.  I did a test cli import into Panorama and the following syntax worked for me: set cli config-output-format set configure set template tst_template config vsys vsys1 ts-agent test2 host testHost2 port 5009 ... View more