This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About sjanita
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About sjanita
08-11-2019
237Posts
64Likes
32Solutions
Aug 11, 2019Last Visited
User
Activity
User
Profile
Latest posts by sjanita
| Subject | Views | Posted |
|---|---|---|
| 2773 | 08-11-2019 08:28 PM | |
| 2483 | 08-11-2019 08:27 PM | |
| 2905 | 08-11-2019 08:25 PM | |
| 5607 | 08-07-2019 01:17 AM | |
| 5694 | 08-06-2019 10:44 PM | |
| 2683 | 08-05-2019 04:02 PM | |
| 4217 | 07-16-2019 01:07 AM | |
| 3343 | 07-16-2019 12:31 AM | |
| 4228 | 07-16-2019 12:28 AM | |
| 3605 | 07-09-2019 12:46 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 5 Likes | 06-12-2019 12:18 AM | |
| 1 Like | 03-12-2019 02:15 AM | |
| 1 Like | 04-10-2019 10:59 PM | |
| 1 Like | 06-27-2019 08:12 AM | |
| 9 Likes | 04-23-2019 08:24 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 2 Likes | |||
| 1 Like |
My LIVEcommunity Articles Contributions
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 Like | |||
| 5 Likes |
User Badges
Community Statistics
| Member Since | 05-01-2009 04:59 PM |
| Date Last Visited | 08-11-2019 11:49 PM |
| Posts | 237 |
| Total Likes Received | 64 |
07-03-2019
09:41 PM
You have to process the traffic logs from the actual device and cannot process the log files from Panorama. This was a change in behavior to address internal changes.
... View more
07-03-2019
09:39 PM
this is due to a change in default behavior - introduced in 1.1.24 - choosing 'All' displays all policies from all DG's for example.
... View more
07-03-2019
09:38 PM
I can reproduce the issue you described. I will open a report for review.
... View more
07-03-2019
09:35 PM
yes collapsing a multi-vsys into a single vsys configuration is a use case for Expedition.
Think of Expedition as a PanOS configuration editor. After importing the 2 configurations you can then use Expedition to move objects from one configuration to the other. In your use case you will want to set the single VSYS config as your base configuration (where you are moving configurations to).
Prior to starting the recommendations is to have a design in mind. For example, when you collapse the multi-vsys config into a single vsys, you will want to consider design options to include:
-if both vsys are layer-3, will you be collapsing to a single VR or use multi-VR's in the single vsys config.
-will you be consolidating VLAN's onto a single trunk
-will some interfaces be combined into same zones
there are many other design considerations, but its recommended to have a design goal prior to starting.
... View more
07-03-2019
07:42 AM
Also, how much memory and CPU's have you made available to the Expedition VM?
Can you check the output from the file below also:
expedition@Expedition : ~ $ cd /home/userSpace/
expedition@Expedition : /home/userSpace $ cat environmentParameters.php
<?php
define ('NumCPUs',3);
define ('TotalCPUs',4);
define ('SparkRAM','4743m');
expedition@Expedition : /home/userSpace $
... View more
07-03-2019
07:38 AM
Can you post the output from the error file:
$cat /tmp error
... View more
06-30-2019
11:02 PM
1 Kudo
try adjusting the permissions on the '/PALogs' on your Expedition server.
$sudo chmod -R /PALogs
Try the scheduled log export test again.
... View more
06-28-2019
08:26 AM
1 Kudo
we had resolved this issue by applying an update to the latest version
... View more
06-27-2019
08:12 AM
1 Kudo
A few feature added in the ver 1.1.9 release is the identification of "Ghost" objects which may require special handling based on the configuration file sources.
What are "Ghost" objects Ghost objects are temporary address objects (address objects only) that were learned from the migration of the Security and NAT policies. The ghost objects are displayed under OBJECTS > Address along with a new counter in the project dashboard.
The attached document provides background information on what causes ghost objects and how to mitigate them within a configuration.
This document will discuss the following topics:
What are Ghost objects
Handling of Ghost objects
... View more
- Find more articles tagged with:
- Expedition Ghost Objects
- Ghost Objects
- Ver 1.1.9
06-27-2019
08:02 AM
2 Kudos
When seeing counters increment for Duplicated Policies, this is indicating there are policies with the exact same name, which can cause a conflict within PAN-OS and cause a commit to fail.
The Duplicated Policies do not indicate an overlap or "Shadow" of policies.
The duplicated policy count can be seen in the PROJECT STATISTICS dashboard.
To view the policies with duplicated names you can use the filter by creating a filter for:
POLICIES > Security > FILTER > MERGE > POLICIES > Security Policies > Click the box for Rule Name
Clicking on each case listed in the results will display the policies with the same name in the background. The policies displayed in the backgroud can be edited to change the names.
... View more
06-27-2019
02:02 AM
I've worked with other ASA 9.x config files and I see the NAT's being migrated.
what version of expedition are you running? if not version 1.1.25 I suggest updating then trying the import and migration again.
To update:
$sudo apt-get update
$sudo apt-get install expedition-beta
... View more
06-25-2019
07:19 AM
go ahead and send an email to fwmigrate 2 paloaltonetworks.com and we can schedule a time to run the debug on the query. Please reference this discussion when sending the email.
... View more
06-24-2019
01:24 AM
are you running Expedition on your laptop/local machine and accessing the cloud based Panorama via the VPN?
this connection should not cause an issue. The important connection is with Panorama connecting to the Cortex data lake to query the traffic log.
... View more
06-21-2019
01:50 PM
with Cortex, you must use the app-ID adoption Fast option. The app-ID adoption slow option is not currently supported.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-11-2019
11:49 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks