About KotreshaMC

KotreshaMC · ‎06-21-2016

Me too.

KotreshaMC · ‎06-15-2016

After renewing the both certificate also we are getting the same alert 😞 😞

KotreshaMC · ‎06-13-2016

Any thoughts about this query??? @reaper

KotreshaMC · ‎06-12-2016

After adding icmp to application it's started working fine. Thanks for your all support guys.

KotreshaMC · ‎06-09-2016

We are receving this alert for the certificate expiration we have configured MDM with one of trusted root certificate (this got expired and we renewed that recently) MDM---->created with root-CA certificate certificate: --root-CA (this was expired but nenewed now) Another certificate( this is expired) but still we are getting this alert? do we need renew the chained certificate of the trusted root certificate also? and we can see that MDM is showing idle (red)

KotreshaMC · ‎06-09-2016

As we can see the link status is showing down in alert.

KotreshaMC · ‎06-09-2016

Hi All, We are using kaseya for monitoring palo alto firewall it was working fine month back but suddenly it stopped and we are getting "Timeout while waiting for response from agent." for all the montors we set up for the anyboady know the solution for this? Regards, Kotresha

KotreshaMC · ‎06-08-2016

You mean to say it's common?? like it'ss be default agedout for ping request?

KotreshaMC · ‎06-08-2016

Hi all, I was able to ping external server from firewall and getting reply back from the server without any issues, however in firewall log it's showing aged out. Anybody know the reason behind this?why we are getting agedout after proper response from the external server?? Regards, Kotresha

KotreshaMC · ‎06-07-2016

I hope below process helps you https://live.paloaltonetworks.com/t5/Management-Articles/How-to-upgrade-a-High-Availability-HA-pair/ta-p/57081 Regards, Kotresha

KotreshaMC · ‎06-07-2016

Yes i can confirm that the rule is above the default deny and we are allowing ping to and fro from cloud servers to internal servers. There no NAT applied on this. however i have added ICMP to the rule and waiting for the test

KotreshaMC · ‎06-07-2016

thanks for your all response We found solution We checked the logs and found that the tunnel was down due to reason "Timed out" - This means we were not getting any reply from the peer end - We took the captures and logs and confirmed that we were not receiving any replies - We checked on the peer end firewall and the traffic was getting dropped by policy "Drop Log" - We created one additional rule above Drop Log to allow the IKE and IPSEC-ESP traffic - As soon as we did that, we confirmed that the tunnel was up.

KotreshaMC · ‎06-07-2016

I can see ICMP IP protocol in the logs.

KotreshaMC · ‎06-07-2016

Yes we have enabled it and i can see it the Zones and ips are correct but still it's not working

KotreshaMC · ‎06-06-2016

the rule is on the top of default deny but still it's not working.

Member Since	‎12-15-2015 11:19 PM
Date Last Visited	‎11-17-2017 05:11 AM
Posts	48
Total Likes Received	5

Online Status	Offline
Date Last Visited	‎11-17-2017 05:11 AM

About KotreshaMC

Emergency Palo Alto Networks Content Updated

Re: aged out vs unknown

Re: Virtualization -- what the heck is it?

Re: Global protect VPN disconnecting multiple times

Re: Global protect VPN disconnecting multiple times

Re: Commit process hangs at 99%.

Re: Global protect VPN disconnecting multiple times

Re: Global protect VPN disconnecting multiple times

Re: Global protect VPN disconnecting multiple times

Global protect VPN disconnecting multiple times

Re: aged out vs unknown

VPN IPSEC tunnel status is Red

Re: Virtualization -- what the heck is it?

Re: ping between serve is not working

Virtualization -- what the heck is it?

Re: Global protect VPN disconnecting multiple times

Re: Security Policy Exception

Re: Blocking macro-enabled Office files (docm, xlsm, etc)

Re: application not working.

Re: PA identifying traffic from AKAMAI as BruteForce.

Re: MDM GP-100-MDM(vsys1): details: certificate chain has expired

Re: MDM GP-100-MDM(vsys1): details: certificate chain has expired

Re: ping between serve is not working

MDM GP-100-MDM(vsys1): details: certificate chain has expired

Re: Timeout while waiting for response from agent.

Timeout while waiting for response from agent.

Re: Ageout

Ageout

Re: Stuck on auto commit

Re: ping between serve is not working

Re: VPN IPSEC tunnel status is Red

Re: ping between serve is not working

Re: ping between serve is not working

Re: ping between serve is not working

Unlock your full community experience!

About KotreshaMC