About vkalal

> Licenses are rolled out per box only so I am assuming you should already have the licenses on the passive unit ... View more

> Yes, you can suspend the passive device first > Move that passive device to the other site > Keep the Preemptive option checked for the primary device   I don't see any issues with this deployment, only one concern when the passive unit is in transit the data center will be left with a stand alone device. ... View more

Reimage PC : To reformat the hard drive and repair damaged partitions ... View more

The default action is set to Alert to allow administrators to choose their desired action. ... View more

It's also vulnerable to injection and execution of shell code ... View more

One of the following should resolve your issue :   1. uninstall and re-install the GP client 2. Upgrade the GP client to the latest version 3. Re-image the workstation 4. If all fails try upgrading the pan-os version. (If you are still on the 6.1.X series) ... View more

> Create an application override policy and mention the following applications in it :   1. service-now 2. tivoli-storage-manager   This will exclude TSM from the layer 7 checks. ... View more

> Clearing session will clear out everything and the new session will use the other active gateway > A feature called TCP midstream-connection-pickup would have helped your situation but I don't believe that on Paloalto we have that feature, Once I saw this feature on Cyberoam firewall (again a linux based OS)   > I think with root access this can be done, but again I am presuming   ... View more

> The only vitals that you can check for is the LED front panel of the appliance :   FANS Green All fans are operating normally. Red One or more fans have failed. ALARM Red There is a hardware failure, which may include power supply detected but not working, fan failure, HA failover, or temperature above high temperature threshold. Off The device is operating normally ... View more

> If you can take a packet capture and also see the traffic logs so see what's really happening with the traffic > And then you can make the required changes in the NAT/Security Policies > Instead of creating bi-directional try creating separate NAT policy for out going traffic and the incomming traffic ... View more

> Shared Obects can be used on any managed device in any of the Device group > Now, if you are able to see those shared objects and not the services there is a possible that the pushed configuration on the managed firewall had a manual override (Some one might have made the changes locally on that firewall)   > There is also a bug which states : Name overlaps between shared address and service objects and groups causes incorrect processing of unused shared objects on commit (PAN-OS 7.0.4)   > You can try to do a force push again all the device group and then try exporting the config on the managed firewall ... View more