About jnguyen

It looks like a possible bug, please create a case and we'll debug further. ... View more

Thank you so much! ... View more

Yes, this was the issue. Palo Alto long haul modules are single mode, but not long haul. We needed the optics that could drive a fiber link with the other end 25 miles away, and the only ones we found that worked are the HP. ... View more

Hi, Please see below and see if that helps answer your questions. The logs are purged when the quota size is exhausted.  This is why it has been recommended to set the overall quota to ~90% of the full disk.  You do not have to save space, but it is recommended to improve performance. The logs are purged to keep the log file as close to full as possible. If a partition is set to 100MB, the logs are not purged until the log file is 100% full (100MB+).  The usage can be over the quota because the indexing will take up space, but it does not use the purging mechanism as the normal log writes.  If the index takes place, but no new logs have come in, the usage can be over the quota (over 100MB for example) until the next log is written.  Once the next log is written, the system will purge enough logs and index files to get below the quota. If the amount of traffic logged is greater than what the firewall can delete, this alarm will be generated as explained in the above. For deleting the logs partially currently there is no command. you can delete entire logs for example if you go to GUI and Device and manage logs it give you option to delete different logs.      If you are looking for partially deleting the logs the work around would be If you resize the partition, and commit and then size it back after the commit, you should essentially remove the last the oldest logs.  For example if you have 1 GB of traffic logs,      resize the partition to 500MB, and commit, you will remove the oldest 500MB of logs.  5. Also if you would like to request a feature to delete logs partially please contact your local SE (Sales Engineer) and he should be able to file an enhancement request for you. Hope this helps. Thanks Numan ... View more

Hello jnguyen, Do you have a plan to change the behavior of  captive portal  for smart phones under the proxy? Regards, Tomoyuki Komure ... View more

The proxy used does not require authentication, so no username / password has been set. ... View more

Hey TedLin, Maybe worth a look: Re: Read ACC Risk Factor with API or SNMP. Kind regards ... View more

As has been suggested, this is almost always caused by a duplex/speed mis-match. Early Cisco switches were notorious for not auto-negotiating connection speed properly. The simplest solution to this is to hard-set the port on the Cisco with the following commands conf t interface <id> speed 1000 duplex full end copy run start If your switch is running CatOS rather than IOS, then the commands are something like this set port speed 3/1 1000 set port duplex 3/1 full Can't remember how to save on CatOS, sorry. You can also hard-set the port onth e PA through the GUI, although you shouldn't need to do it at both ends. Cheers ... View more

You block the page with a standard or custom message page that essentially says "disallowed." Or you can use a  "continue" mechanism that indicates that the user understands they are supposed to go to the URL but can if they really want to but that the action is logged. Or you can override the request by having the user input an administrative password. Though this last item probably isn't really practical for production networks. ... View more

first two errors comes from failed ATA transaction. It does not mean that the drive is immediately failing, but is a good sign that the drive is starting to have issues.  Generally means that it is likely to have other problems in the near future. third error means content failed to either download or install. Please open up a case for further investigating. ... View more

most likely seems like it does not have permissions to open the file. This may be easier to address via a go to meeting. Please contact your support provider. ... View more

Back to the PPTP then - I already have 1:1 NAT setup for the PPTP "server."  Do I just need a security rule for Application pptp then?  I'm not sure how to forward GRE traffic, unless the pptp App rule will take care of that? Not related to any of the other questions - SSL-encrypted IMAP or SMTP, do those fall under the generic "ssl" Application?  I imagine that if I setup SSL decryption / MITM for the PAN, then it would be smart enough to expose the underlying apps, but otherwise I'll need to use "ssl" instead? ... View more