About TheRealDiz

TheRealDiz · ‎04-13-2016

Hi @Jack_Howells, I know that 578 it was removed by PA .. I was busy with customers. I just want to share with you, my experience with this issue 😛 Probably in future we need to pay attention with Content Update and PANos version.. Cause today with 7.1.0 update 578 works fine. In order to avoid an important business impact on enviroments .. I have spent a lot of hours during this morning just to understand this behavior and cause of issue. I hope this was helpful. Ciao Luca ;)))))

TheRealDiz · ‎04-13-2016

Hi all, I have tested another work-around, simply reboot your PA firewall solve this issue. Also I Have tested with 7.1.0 and I can clearly see that 578 content doesn't cause any kind of issue with this PAN-os version. So in conclusion you can: - Revert to 577 - Reboot your PA firewall - Install latest PAN-os version 7.1 All of these options solve this issue. Best Regards Luca

TheRealDiz · ‎04-13-2016

Hi @Jack_Howells, We have the same issue on different customers enviroment. We reverto to 577 .. What a huge problem!!! 😧 Everything was down in term of connectivity on customers side I hope everyone solved this BR

TheRealDiz · ‎04-12-2016

Thanks a lot for your quick response!!! I have solved it BR Luca

TheRealDiz · ‎04-12-2016

@Brandon_Wertz Yessssir! haha 🙂 I'm agree with you I don't like this "style" .. Looks like a very OLD style. 😧

TheRealDiz · ‎04-12-2016

Hi All, After upgrade to 7.1, I cannot see firewall under: I have this problem only with pan500, with 200 works properly. Is that a bug or license issue? Any kind of suggestion? Best Regards Luca

TheRealDiz · ‎04-01-2016

Hi @_slv_, @rmonvon, @Jacopo_Vigano Thank you all guys for your quick response. I supposed wrong that the NOT available column was related with PA200 model while is related to PAN-OS version. Thanks again BR Luca

TheRealDiz · ‎03-31-2016

Hi All, I am checking traffic logs under Monitor tab. In order to troubleshoot issue and understand behavior of a specific traffic flow, I think "Session End Reason" column is really needed. That's why I am writing on community. We have two PA firewall: - PA-200 - PA-500 On PA-500 I can clearly see column mentioned, while on PA-200 is NOT available. Can anyone confirm that on PA-200 "Session End Reason" column is not available? BR Luca

TheRealDiz · ‎03-30-2016

Hi @Lucky, Thanks again!! I don't forget it 😄 !!!

TheRealDiz · ‎03-30-2016

Hi @reaper, Perfect!! In conclusion there is not a field that can indicate exactly when a Session is ended the only way is to calculate it with: -------------------------------------------------- Session Ended = Start Time + Elapsed Time --------------------------------------------------- That's important and main information on my side, simply because I need to know exactly when a session is ended. Also thanks to @Brandon_Wertz for your response! KR Luca

TheRealDiz · ‎03-30-2016

Hi @reaper, Thanks a lot for your explanation. I agree with you but I need to find a point on this one. In conclusion if Generate Time is not strictly related to Start + Elapsed Time, in order to be accurate on Session Time: Elapsed Time = Is duration of session from SYN to FIN Session Ended = Start Time + Elapsed (I suppose) Example Start Time = 10:00:00 Elapsed Time= 60 sec Generate Time = 10:06:00 (Depends on data-plane and management-plane load and other several factors) Session Ended = 10:00:00 + 60 sec = 10:01:00 I need to be accurate when Session is ended. Correct me if I am wrong. Also last question is: ----------------------------- Time Logged N/A; Can someone explain this specific parameter? ----------------------------- Thanks and Best Regards Luca

TheRealDiz · ‎03-29-2016

Yeap! Sure

TheRealDiz · ‎03-29-2016

Hi All, I have question for you. We have analyzed our log and seems there is something that is not properly correlated. Here below a little explanation regarding parameters mentioned: ------------------------------------------ Receive Time Time the log was received at the management plane Generate Time Time the log was generated on the dataplane Time Logged N/A; Can someone explain this specific parameter? Start Time Time of session start Elapsed Time (sec) Elapsed time of the session ------------------------------------------ Assuming this, I need to understand better this output: I have flagged "Log at session end". I suppose that : Generate Time = Start Time + Elapsed Time. So we can clearly see from output provided that Elapsed time + Start Time IS NOT equal to Receive Time for line where value is 240. While for line with value 61, Elapsed Time + Start Time IS EQUAL to Receive Time. Any kind of suggestion? Thoughts? Best Regards Luca

TheRealDiz · ‎03-29-2016

Thanks Again Lucky, That's a good news 🙂 BR Luca

TheRealDiz · ‎03-24-2016

Hi @Lucky, Thanks a lot for your response. I know here there are NOT "official response" from TAC, so thanks again for your patie. In conclusion as I understand seems PA TAC working on this one and sure there is something changed on Whatsapp side. For me this information it's all I need. BR Luca 🙂

Member Since	‎01-18-2016 06:21 AM
Date Last Visited	‎04-10-2018 03:13 PM
Posts	96
Total Likes Received	12

Online Status	Offline
Date Last Visited	‎04-10-2018 03:13 PM

About TheRealDiz

Re: Shutdown/Disable MGMT interface due to DNS issues

Re: Shutdown/Disable MGMT interface due to DNS issues

Re: Shutdown/Disable MGMT interface due to DNS issues

Shutdown/Disable MGMT interface due to DNS issues

Global Protect bug/loop - Playstore App version 4.0.4(10)

Re: UserID - nt authority\accesso anonimo

UserID - nt authority\accesso anonimo

Re: Exposing Video conference - "Incomplete" traffic allowed

Re: Exposing Video conference - "Incomplete" traffic allowed

Re: Exposing Video conference - "Incomplete" traffic allowed

masterd: restart exhausted, rebooting system | Palo Alto's process

Re: Cannot ping connected adsl modem.

Re: VPN Site to Site traffic - ALLOWED even if there is defined A SPECIFIC proxy id

R: The latest reliable panOS version

Re: PA drops traffic apparently without NO REASON

Re: Shutdown/Disable MGMT interface due to DNS issues

Re: Shutdown/Disable MGMT interface due to DNS issues

Re: Shutdown/Disable MGMT interface due to DNS issues

Re: A Fall/Autumn Question: What is your favorite Palo Alto Networks feature?

Re: UserID - nt authority\accesso anonimo

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Apps and Threats 578-3263 URGENT SOLVED

Re: Deployment software with 7.1: Cannot see firewall listed

Re: Upgrade to 7.1.0

Deployment software with 7.1: Cannot see firewall listed

Re: Session End Reason column NOT available on PA200

Session End Reason column NOT available on PA200

Re: Whatsapp traffic not always recognized properly

Re: Difference between: Start Time | Generate Time | Receive Time | Elapsed Time

Re: Difference between: Start Time | Generate Time | Receive Time | Elapsed Time

Re: Difference between: Start Time | Generate Time | Receive Time | Elapsed Time

Difference between: Start Time | Generate Time | Receive Time | Elapsed Time

Re: Whatsapp traffic not always recognized properly

Re: Whatsapp traffic not always recognized properly

Unlock your full community experience!

About TheRealDiz